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1.U Lotreduction 
1.1 Purgese_ang_ scope 


This document 
capabilities and 
Supervisor (CFS) 


The services 
catuloyged vy the 
uNncataloged 
other than 
to such 


PIS 


The services that FMS 
pertormed by otner 
source Manager. 
ings the operation of 
herein. 


of the 
and options 


The version 
functions 


o Mass Data File 


descripes 
external 
Services to be 


provided by 
FMS. 
files or 
None of the services 
uncataloged files. 


provides depend on supporting 
operating system 
Alt hough 


SECTION 17 


FMS SERVICES 


and defines the functional 
interfaces of the File Management 
jnmolemented for SR5v. 


FMS apply only to files to be 
In addition to such files» there are 
files that may be cataloged by means 


described herein apply 


services 
Subsystems such as Re- 
occasionally referenced in pass- 


these other programs is not described 


EDS does not include the additional 


necessary to supports: 


subsystem 


1-2 Backyrouns_Assumed_for_the Reader 


The reader snould be 
File Manayjyement Systems 


familiar with tne concepts of the GIII 
GCOS IV EtClLs and Resource Manager. 


June 256 1979 - 09235 


External_Eunctional Description 
CDefinitioa_of_lecrms 
Access_Control_List 


An Access Control List 1s a Logical structure used 
within GCOS 66 to limit access to certain resources 
Including files, directoriesSs peripherals» and applica- 
tion software. The limiting of access includes both 
those who can use the resource and how the resource may 
be used. 


Access _Cuntrol Liste _Initial 


The initial access control list 15 a List associated 
with a directory that specifies what the access control 
list of a newly created directory or file subordinate 
to it will ve. 


-_—— ae -a en 


ACCESS RIGHTS are the privileyes or permissions given 
to a user or users which allow tnem to use a service or 
access @ resource. An example of a resource from a 
Media Management System (MMS) point of view 18 a tape 
or @ disk or aset thereof. 


Account 


An ACCOUNT ais nechanism provided to charge users for 
services and resources. Typicallys an account is 
assigned tv 3a project or department of which the user 
1S parte An ACCOUNT is also the top directory node for 
a sudstructure on a disk volume set, An account node 
may reside on more than one disk volume set. It 
differs slightly from a regular directory in that there 
are special records (or files) associated with an AC- 
COUNT that contains information such as valid users for 
this ACCOUNTs accounting informations etc. 


Une ACCOUNT 1s always designated as the SYSTEM ACCOUNT 

and catalogs system information such as mail boxess 

work stationss and users who can log on to the system. 
Account Adgmiaistcatoc 

An ACCOUNT ADMINISTRATOR is the person given the re- 


Sponsibility and authority to allow other persons to 
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Operate under the account and to set some maximum dol- 
lar value which the user may charge to the account. 
The ACCOUNT ADMINISTRATOR represents the OWNER of the 
ACCOUNT, 


Accyunt Ly 


An Account _Id 18 a unique Name assigned to each account 
in tne system. 


o> @nte oe i 


An activity is a subdivision of a job that corresponds 
to the execution of one or more processes. It 38 sSsyn- 
onymous with the term "job step”. 


Attribute set 


The attribute set censists of the information about a 
file that may be needeg when that file is accessed, 
This information is specified when the file is created. 
Some of these attributes can de permanently modified or 
temporarily overridden for the duration of a job. 
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Catalog 


The FMS Cataloy 1s a 
Duilt ang maintained by FMS to retain 
files and their authorized users. 
ture is created for each 
about files cataloyed under that account name, 


structure of mass storage records 


account to record 


mnformation about 
A s@parate substruc- 
information 


The 


recordss Girectories and file descriptions within each 


account's 


Substructure are 
cnhical grouping of files for the account. 


zation may be illustrated as follows: 


organized to allow hierar- 
This organi-~ 


Penne, are 


JAccountl 


j ee eer f 


IVol-Setl 
L_Root | 
ey ee a a ee ere OES Me Nee eer Se CMe RONEN ee ee 
'; | | 
Seas Vee eet, pene 
iAccount | lAccountl 
5 ene 5 gee: | arene = ey 4 
Sees ee ns See ere ee 
i i i | 
ey ee a. eae V ee Sone 
ioBii Lie ll CS) LoK LL 
eee aay ee es hee eee i 
V V V WV 
| €G) CH) Ci) CL) 
{ 
ae gee 
L101 
ee ae pene 
Vv W 
CE) (F) 
where rectanules represent directories and circles rep- 
resent descriptions. 
Creator 


The CREATOR of an entity is the person who first 
establishes the entity. The right to create an entity 
Subordinate to a catalog node is aright that must be 
granted by the OWNER of the nodew The CREATOR of an 
entity has several implied rights with respect to that 
entity, ne may reads writes or delete the entity and he 
may assiyn the rights of other users (including the 
OWNER of the superior nodes) with respect to the enti-~ 
ty. The CREATOR of an entity is an OWNER of that enti- 
ty and all subordinate entities. 
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Directory 


A OIRECTORY 15 a entry in the structure that serves as 
an index to subordinate directories, file descriptions, 
and links to other parts of the structure. It 1s used 
to establish the hierarchical or “tree” organization of 
tne structure. It also contains access control infor- 
mation for tne directory node and default access con- 
trol and attributes for Subordinate files and 
directories. 


birectorysg initial _ working 


The directory that is estadlished as the working direc- 
tory for a user when he first logs into the system 1s 
the initial working directory. This directory 1s 
specified in the user profile and 1S based on the 
userid and account under which he enters the system. 


Jirectorye Root 


The root directory is that directory that 158 Superior 
to all other directories or files on the containing 
vOlume set. The root directory is often referred to 
Simply as the “root”. 


QDicectacye Working 


The working directory identifies the user's current lo- 
cation within the catalog hierarchy with regard to rel- 
ative pathnames. Any pathname specified by the user 
that does not begin with a greater than (>) character is 
considered to be reiative to the working directory. By 
defaults this directory is used by the search rules 
(See section 3.3.4). | 


Directory _wvierarchy 
The directory hierarchy is the tree structure organiza- 
tion cf the Logical contents of the catalog. 

Entry Name 
An entry name is a name given to an item contained in 
the cataloy data structure. It may contain one or more 
components separated by periods. Ali names given to 


entries immediately subordinate to a directory must be 
un 1TQue. 
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Egual_ Convention 


The equal convention is a method used by some commands 
to specify one or more characters in a group of subor- 
dinate entry names. 


File 


A FILE is a collection of information consisting of 
records pertaining to a single subject. In the context 
of business catasy a payroll file is an example. A file 
may reside ona disk or tape volume set and may be 
recorded on more or part of a volume or on more than 
one volume. It may be cataloged or uncataloged. If it 
resides on disk and is cataloged, it must reside on the 
same volume set as it's file description. 


File veneratiagn 


A File senerations or simply a Generations is a file 
which iS part of a Generation Set. 


77 «ap <p (‘om me SN ee 


A Generation Set is a cataloyed set of successives 
functionally related files which are controlled by the 
System. 


File_Name 


Filename is a generic term for the identifier of a 
file. More specific terms are absolute pathname, rela- 
tive pathname, @ntrynames, external file name and inter- 
Nal file name. Each of these is defined in this sec~ 
tion. 


File_Namesz External ¢efnd 
An external file name is fully qualified pathname which 
identifies a file unambiguously to the file system. An 


external filename is often referred to as a pathname or 
a filename, 
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File.Naweg_Internal Ciftnd 
The internal file name relates the program's declara- 
tion of a file to an external file name. The file so 
referenced must be present in the Search path. The in- 
ternal file name corresponds to the "file code” of GCOS 
i aes 


Eile Set 
A collection of one cr iaore related files recorded con- 


secutively on a tape volume set. A file set may be 
cataloyed or unc ataloged. 


ane 
fom. 
is 

i 


A Link is an entry in the catalog structure that 
scoecifies the pathname of an entry in another directo- 
ry. it allows references to items in other directories 
as if the were actually contained in the working direc- 
tory. 


LOovical_Unit_besignator_ (Lub) 


The Loyical Unit Designator (LUD) allows a single file 
to be referenced by different ifn's within subsequent 
activities without establishing an equivalence between 
each new ifn and the efn.w The LUD serves to e@quate the 
ifn in the sudsSequent activity with the file assigned 
to the same LUD in a previous activity. The allocation 
for the file must be continued across each activity in 
question. Thuss when an efn changess only a single 
command change 1s réquireds each activity does not have 
to be updated. 


Qwner 


The OWNER of a node is the person to whom the charges 
for that node will be applieds e.g. the ACCOUNT ADMIN- 
ISTRATOR 1s the OWNER of the account. The OWNER of a 
node has the implicit right to delete that node or any 
subordinate nodes however all other rights to the node 
or any subordinate node must be explicitly granted. An 
example of a node is a directorys volume set, etc... 
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Parameter 


A parameter is controlling information provided by the 
user to the comnand processor. Parameters customarily 
appear wn argument Lists as self~identifyings 
positionals or "keyword value" elements. Parameter may 
appear as single elements or as lists of elements. 


Pathname 


A pathname is a character string that specifies a di- 
rectorys files or Link by its position in the directory 
hierarchy. The pathname may be either relative or ab- 
solute. 


Pathboawes Absalute 
An absolute pathname is a concatenation of file name 


With all superordinate directories leading back to the 
volume Set root. 


Pathnames_ Relative 
A relative oathname is a pathname that uniquely 
identifies a cataloged Object (Cdirectorys files or 


Link)? relative to the working directory. 


Person_1g 


A Person_Id 18 a unique name assigned to each individu- 
al authorized to use resources of the system, The indi- 
vidual may act In several roles and operate under one 
or more accounts. Associated with each Person_Id is a 
passwords used during Loy Ins» to insure the identity of 
tne individual,.. 


atar_ Convention 
The star convention 1s a method used by some commands 
to specify a common component cf several entry names by 
the use of the asterisk character. 

System _Agministcator 
The SYSTEM ADMINISTRATOR 18 the person concerned with 


the overall integrity» securitys and maintenance of the 
computer hardwares softwares and database throughout 
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the enterprise. His organization includes databases 
communications, and storage administrators as well as a 
staff of system programmers. The SYSTEM ADMINISTRATOR 
represents the OWNER of the system resources. 


User 
A USER is an entity which utilizes the resources of the 
system. He has a detined set of access rights to sys>~ 
tem sServicess filess work stations and mailboxes, 

User.5essioo 
A User Session 1s defined for a user to be the ordered 
set ot commands and resources invoked from the “Log on" 
action initiated by the user to the termination of 
orocessing on behalf of the user. A session spans the 
time from the "Loy on" to the "Bye", regardless of in- 
put media or mode of system connection. 

Volume 


A VOLUMEs from the MMS point of views 18S either a disk 
or tape voluine. Any given volume known to MMS belongs 
to One and only one volume set or it 18 unassigned 
(must be cleaneds etc.). 


Velume_set 


Volumes are managed in yroups of related volumes called 
VOLUME SETS. One or more disk or tape volumes (of the 
Same type) may constitute a VOLUME SET. A VOLUME SET 
may eitner be in scratch, hold or assigned status. 


coc FNS Secvices 


The file management supervisor is the administrator of a da- 
ta structure used to maintain information about each file's 
Spaces attributes of the file and authorized users of that 
space. Information 1s kept about accounts, userss files and 
directories and their implicit and explicit relationships. 


The information is built and maintained by a set of services 


that are invoked by ECL statements and/or direct calls from 
programs. These services provide the capability of 


i=5: * June 25, 1979 ~ 09235 


creatings deletings allocatings retrievinygs modifying and 
Listing entries in the data structure. 


Cataloging is the method by which information concerning the 
file is built ana maintained and is the basiss thuss for all 
other services. Cataloging services allow files to be 
createGg and deleted and their descriptions to be grouped and 
modified. 


Caceolel Catalog Creatlivo_and Maintenance 


The following operations to build and maintain directories, 
lLinksSs and files must be supporteds 


Oo Creation - the construction of a directorys link or file 
descriptions and particularly in the case of file cre- 
ations means the assignment of space for the file. 


eo Modification - the changing of a catalog Link or file de- 
scriptions Dut no changing of file content. 


o Deletion - the removal Of a catalog and any subordinate 
catalogss linkss or file descriptions and usually the re- 
lease of space assiyned to files. Deletions are achieved 
in two forms: in ones, the file space 715 overwritten with 
zeroes before release and inthe others this relatively 
time-consuming operation is skipped. 


eo Listing ~~ the display of directories, linksys and file 
descriptions but no display of file content. 


© Inquiries ~ provide program access to information in 
directoriess linkss or file descriptionss but not to file 
content. 


Cocelnc File Allocation_ang Deallocation 


o File Allocation - Vatidate the requeSter's right to access 
a cataloyed file. If access 1s authorizeds grant read or 
read and write access to the file content and build the 
mapping information that this requires. This function al- 
so establishes an association of the allocated file and an 
internal name used by any programmatic reference to the 
file content. 


o File Bbeallocation - Remove the association between the 


file and the internal file name and delete the mapping in- 
formation used to access the file content. 
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e.2.1.5 tHiscetlaneous Services 
o Add file space 
o Release file Space 
o Read file attributes 


o Write file attributes 


ée) Lataloy_structure 


The catalog i$ a structure of mass storage records used to 
maintain information about files and their authorized users. 
The cataloy 18 bLaSeU ON @ tree structured directory hierar- 
chy which contains directorys, file and Link entries. 


2.5.1 directory 


A. directory is an entry in the tree structure which serves 
as an index to files links and other directories. The di- 
rectory alSo contains access control information for itself 
and default access control lists for subordinate directories 
and files. 


Tne directory is located by specifying a name concatenated 
to the name of the superior directory. That directory is 
Located in the same manner by the name of its superior di- 
rectory. The first directorys considered as the base of the 
tree is called the root directory. All other directories 
are subordinate to it. 


eesuc Elle 


Each cataloged file is described by a file description entry 
in the catalog structure which contains a full set of 
attributes describing properties of the named file. This 
intormation includes the file's physical locations size pro- 
tection regquireds date Last accessed, access control infor- 
fiations, etc. It may be located by specifying the file's 
name concatenated to the name of itS Superior directory. 


22525 Link 
Eacn Link contains the pathname of a target entry. It may 


reference directly to the entry of interest or name another 
bank. The entry being referenced may be a directorys file 
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subordinate to its own directorys in another directorys on 
another volume set or a file at a remote site. 


2.4 Catalou_ Structure Placement 


Although one can visualize the cataloy as a tree with multi- 
ple directory levels all emanating from the roots there may 
be in fact multiple trees on-line at the Same time. Where 
each tree is uniguely identified by its root directory. 


Each tree 18 Laid out on One disk volume set and the name of 
the host volume set 1s also the name of the tree's root di- 
rectory. Therefore, the pathname indicates the disk volume 
set on which the directivess links and file descriptions are 
to pve placed, 


Reference to any entry begins at the first entry (Cor root 
directory) in the tree and consists of a string of directory 
names ending with the name of the target files, Link or di- 
rectory. | 


An entry naine is the name of a files, directory or Link. An 
entry name consists of at least one and no more than 32 
characters. This Name may consist of upper or lower case 
alphabetic characters (€A-2s a-z), digits (0-9), hyphens (-), 
periods (.).s and underscores (_). However, the first char- 


acter of the name must not be a hyphen or an underscore, 


The period 18 used to separate components of an entry names 
where eacn component 318 a logical part of the name.w In some 
caseS, system Software such as the PL/71 and COBOL compilers 
will consider the last component of the file name as a 
qualifier that ocenotes tne file's content. Several system 
conventions Ce.ges the star convention and eygual convention) 
may be used with the FMS services to operate on component 
yarts of the name, 


If the entry name represents a generation sets a generation 
identifier may be append to the name. This generation 
identifier is used to indicate a specific member of the gen- 
eration set when creatings deleting or allocating a genera- 
tion file. The syntax provides for both absolute and rela- 
tive specification of the desired generation and 7s 
indicated by: 
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-eGnNnnN aosulute generation 


*0 Cor LAST) last generation created 
*+]1 Cor NEW) new generation 
*-TN generation relative to the Last generation, 


If mo specific yeneration is specified the last generation 
7s assumed for read allocations and anew generation is 
assumed for write allocations. 


2+5.c Pathogme 


A patnname 1S a Sequence Of entry names used to reference a 
file or directory. Each entry name except the last in a 
pathname 1s the name of a directory entry in the directory 
hierarchy. Tne tast entry name in a pathname is the name of 
a filer directory or link entry. Names which are 
concatenated to form the pathname are Separated by 
greater-than characters (>). The total pathname must not 
exceed 168 characters in length. The number of Levels that. 


may be specified ina patnname will depend on the 
accumulative size of the entry names, however it may not ex- 
ceed 15. 


There are two basic types of pathnames ~- absolute and rela- 
tive. An absolute pathname traces an entry from the root 
Cirectory,s a relative pathname traces an entry from the cur- 
rent working directory. A special case of a relative 
pathname is a "siimple™ pathname, 


2e5ece] ADSOlUte Pathoawe 


>named Start at the system root and Locate 
namel. 

>namelr>namec Start at the system root and Locate 
namel. In directory Namels» locate 
Aanhe é * 


If the first element of a pathname begins with a circumflex 
(") character position 5/14 1n 15U R646 IRV), the element is 
@ volume set name and specifies that the root of the direc- 
tory hiefarchy is located on the identified volume. For ex- 
amples 


“AB1i2c34>namel Go to the root on the volume set 
"AB1T234", and Locate namet 


“ABV SY >namel>name2 Go to the root on the volume set 
"AS7&E9"5 ana locate namel. Then locate 
nanec» 
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A null volume set name in an absolute pathname of this form 
references the Working Volume Set. For examples 


“>nemel - Go to the roct of the working Volume 
Set and locate namel. 


“>nemel>onamee - Go to the root of the working Volume 
Set and locate directory namel. In di- 
rectory nameils Locate named, 


Cerecee Kelative Pathoanme 


A relative pathname appears much Like an absolute pathname 
except that it may not contain a Leading greater-than (>) or 
circumflex (7) character. It is interpreted aS a pathname 
which 1S yualifiedc by using the current working directory as 
a prefix. The simplest torm of a relative pathnames known 
as a Simple pathnanes is the single name of an entry. For 
examples 


namel Locate namel in the current working di- 
rectory. 


A more complex form of the relative pathname uses a directo- 
ry Located by adding the current working directory as the 
starting point te search through one or more levels for the 
cesired file or directory. See the following example. 


nanel>namec Locate namei in the current working di- 
rectory and then locate named. Note 
that the search rules are not applied 
since it 18 a multiple entry pathname. 


A less-thun (<) character position 3/12 in I1S8S0 R646 IRV) can 
be used at the beyinning of a relative pathname to indicate 
that the directory immediately superior to the current work- 
mg directory 18 where the entry name may be found. The 
less~than character can be Used to denote levels in the di- 
rectory hierarchy similar to the use of the greater-than 
character. Each lLess~than character represents one level in 
the hierarchy (toward the root)s starting at the current 
Working directory.« In this ways a directory several levels 
Superilor to the working directory can be Searched. 


<<<namet 3O back 5 directories and then locate 
namel. 


<<nanet>nanmee Go back 2 directories and locate namel. 
Then find namece, 
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Corefod Examples 


ASSume a volume set with the following structure: 


IVOL~SET I Volume set 
L_ROOT I "ABC-VOL" 
ae Ae erred ae reer een ne renee ee ere 
PERS ER een eee On Rare ects Bee | 
i | | 
era) eae ~-¥o. et, eel 
Account Noues LaA_l A Bek A ieee Ow 
| ss eens 2 ere 
Bae gate ee | ieee | 
| J | | | 
a Goes ~ VL V ee, V V 
teal 1 ie pete (1) Licll C2) (35) 
rae en: (co eee eeeaee ee eS ae i ae ee 
{ | | | | 
__ ve ¥ V V V V y 
no ee | (4) £5) 60 (7) (8) (9) 
oe eee 
Wy "I 
(1g) (11) 
wheres 


1. Volume set "ABC-VOL™" contains Accounts "“"A™,"B", 
ang “OC. 


2» Account "A" has two immediately subordinate 
directoriess "a" and “b", and one immediately sub- 
ordinate files "1", 


3. Account "B" has one immediately subordinate direc- 
torys “c's and two immediately subordinate files, 
“on atid ae . 


4. Account "C" is undefined for the purpose of this 
example. 


3» Subordinate directory "a" of Account "A" has one 
Immediately subordinate directorys "d"» and two 
immediately subordinate filess "4" and "5", 


6. Subordinate directory "dd" of directory "a" has two 
immediately subordinate filess "10" and "11", 


(2 Subordinate directory "pb" of Account "A" has two 
tamediately subordinate filess "8S" and "7", 


e #? 


Se Subordinate directory "“c" of Account "“B" has two 
immediately subordinate filess "8" and "9", 
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Thenes 


The absolute pathname of file "11" 45 — “*“ABC-VOL>A>a>d>17 
The absolute pathname of file "4" i5 = “ABC-VOL>A>a>G 
The absolute pathname ot file "6" 15 - “ABC-VOL>A>D>6 
The absolute pathname of file "7" is - “*ABC-VOL>A>1 
Tne absolute pathname of file "8" 18S - “ABC-VOL>B>c>&, 
The absolute pathname otf file "2" is - “ABC-VOL>B8>2. 
If the Working birectory is at Account "A" (C°ABC-VOL>A), 
thens 
The relative pathname of file "11" is - a>r>d>11, 
The relative patnname of file “4" is —- ard, 
The relative pathname of file "6" is —- b>6, 
The relative pathname of file "1" is - 1, 
The relative pathname of file “&S" is —- <B>c>8, and 
The relative pathname of file "2" is 7 <B>2,. 
If the Working Birectory is at Subordinate directory "a" of 
Account "A™ ("ABC-VOL>A>a)- then: 
The relative pathname of file "11" is - d>11, 
The relative pathname of file "4" is - 4s 
The relative pathname of file "6" is —- <b>6, 
The relative pathname of file "1" is - <1, 
The relative pathname of file "8" is - <<B>co>&,s and 
The relative pathname of file "2" is - =<<B>2, 
Code te4 Star Names 
Many cofimands that accept pathnames as input allow the final 
entryname in the pathname to be a star name, A star name is 
1-16 
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an entryname,. The star convention matches a star name with 
entrynames ina single directory to identify a group of 
entries. The entrynames matching a star name have components 
mn common and are Matched according to Specific rules. 
Commands that accept star name perform their function on 
each entry identifieu by the star name, 


o Constructing Star Names 


Star mames are constructed according to the following 
rules: 


1.2 A star name 1S an entryname, Therefores, 31t 715 com- 
posed of a stringy of 32 or fewer characters as 
described in section 2.5.1. 


ce A Star name 7S composec of one or more nonnull 
components. This means that a star name cannot begin 
cr end with a period (.) and cannot contain two or 
hore consecutive periods. 


5S. Each guestion mark (€?) character appearing in a star 
rame component is treated as a special character. 


4. Each asterisk or star character appearing in a star 
Name component is treated as a special character, 


Se A Star name component consisting of only a double 
Star (**) 15 treated as a special component. 


o Interpreting Star Names 


A star name 158 matched to entrynames in a single direc- 
tory according to the folloning rules: 


1. Each question mark (7) in a star name component 
matches any one Character that appears mn the 
corresponding component and character position of an 
entryname. 


cw Each asterisks In a star name component matches any 
number of characters Cincluding none) that appear in 
the Corresponding component and character position 
ef an entryname. lf the asterisk is the only charac- 
ter of the star name components it matches any 
corresponding component of en entryname, Only one 
esterisk can appear In each star name components ex- 
cept for the double star component as noted In the 
next rule. 
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The double star component (x**) In a star name 
matches any number of components Cincluding none) in 
the corresponding position of an entryname. Only one 
double star component can appear in a star name. 


ce) Eygual Names 


Some commands that accept pairs of pathnames (e.wg.as the 


Rename 
pathname 
second 


command) allow the final entryname of the first 
to be a star names and the final entryname of the 
pathname to de an euual name. An equal name is an 


entrynatie containing special characters that represent one 


or more 


characters from the entrynames identified by the 


Star name. This provides a powerful mechanism for mapping 


certain 
second »p 


o Constructing 


AN 


1% 


2» 


o Interp 


An 


character strings from the first pathname into the 
athname cf the pair. 

gj Equal Names 

equal name is constructed according to the following 
rules: 


An equal name 1s an entry name. Therefores, it 15 
composed of a striny of 3e or fewer characters as 


described in section 2.5ele 


An equal name 1s composed of one or more nonnull 
components. This means that an equal name cannot 
begin or end with a period (.) and cannot contain 
two or more consecutive periods. 


kach percent sign appearing in an equal name compo- 
nent 1S treated as a Special character. 


Each equal sign (=) in an equal name component is 
treated as a special character, 


An equal name component Consisting only of a double 
equal sign (==) 15 treated as a special component. 


reting Equal Names 


equdl name maps, characters from the entrynames that 
match the star name (first entryname) into the sec- 
ond entryname of a pair according to the following 
ruless 

tach percent sign (4%) in an equal name component 
represents the single character in the corresponding 
component and character position of an entryname 
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identified by the star mame. An error occurs if the 
corresponding character does not exist. 


ee AN eyual Sign (=) In an equal name component 
represents the corresponding component of an 
entryname a iawdentified by the star name, An error 
occurs 1f the corresponding component does not ex- 
17Sst. An error also exists if an equal sign appears 
1 06a «6©6component that contains a percent character. 
Only one equal sign can appear tin each equal name 
componente except for a double equal Sign components 
as noted in the next rule. 


5S. The double equal Stgn (== component of an equal 
name represents all components of an entryname 
identified by the star name that have no other 
corresponding Components in the equal name. Often 
tine douole equal sign component represents more than 
one component of an entryname identified by the star 
name. If sor tne number of components represented by 
the entire equal name is the same as the number of 
components in tie entryname. When the equal name 
contains the same number or more components than the 
entrynames a double equal sign 15 Meaningless and, 
tnherefGres 1gnored. Only one double equal sign com- 
ponent can appear in an equal name, 


2.9.5 Remote Files 


In GCOS IVs atl pathnames are relative to root directories 

(Volume Sets?) Located at the host site. Therefores in order 
to reference a file located at another sites a link entry 
must be created in the Local Site's catalog structure which 
defines the location of the file anc the name by which the 
file is cataloged at the remote site. 


The Link entry wittl contain the absolute pathname of the 
file and a mailbox that represents the remote nodes file 
transfer work station. 


when the file is to be accessed from the local sites the 
requestor will orovide the patnname of the Link and will be 
given the file transfer mailbox and the absolute path name 
for the file. The requestor (€e.9. Resource Manager) must 
then use some predefined protocol to actually allocate the 
file at tne remote site, 
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Within the files cataloged in FMS there are or may be groups 
of two or wore files that are related to each other in such 
a fashion that they must be maintained at the same update 
base, The Index file and the Data file of an Indexed Se- 
qguential file are a good example of such related filess how- 
evers otter user data files may have the same sort of rela- 
tionship. For such filess if one of the files is restored 
to a pricr update state, all of the related files must also 
be restored to the same update state. In GCOS IIIv FMS has 
no “knowledge” of this relationship and the entire burden of 
maintaining the correct upcate state of such files falls on 
the person pertorming the RESTORE or ROLL BACK. Since the 
KESTORE 18S uSually performed by a System Administrator who 
may not have direct knowledge of the relationship of the 
files ana since GCOS IV provides a physical RESTORE by vol- 
ume for which the user may not airectly know just which 
files are being restoreds this bdurden may well be excesSive. 


AS a solution to this problems FNS provides an attribute on 
each directory that 15 Interpretea to mean that all files 
subordinate to this directory are related. The RESTORE 
Utility will interrogate this attribute on any implicit file 
restore tany RESTORE other than one with the -ONLY option) 
to ensure that all related files are also restored. 


It will remain the user'’S FreSponsibility to create the di- 
rectory with the “related” attridute and to create all re- 
lated files subordinate to the directory. 


€.6.1 Entry_Name 


An entryname -consists of at least 1 and not more than 
3¢ characters. This name may consist of upper or Lower 
case alphabetic characters (A-Zs a-~z), digits (0-9), 
hyphen (-), periods.(.), and underscores (_). However, 
the first character of the name must not be a hyphen or 
an underscore, 


The person_id (person identifier) is made up of at 
least 17 and no more than 12 characters. The name may 
consist of upper anu lower case alphabetics (Ar~mZsea~-2z)+ 
numbers (U-GS)., hyphens (7), and underscores (_). How- 
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evers the first character must not be a hyphen or an 
underscore. 


C2645 AccaQuot ld 


Tne account nane consists of at least 1 and no more 
than le characters. The name can be made up of upper 
anc lower case alphabetics (€A-lZsea-2). numbers (0-9), 
hyphens (7)- and underscores (_). The first character 
must not be a hyphen or an underscore, 


C2604 Volume Identifier 


The volune identifier is at least 1 but no more than 6 
characters. the name may consist cf upper and lower 
case alphacvetics CAr-2sa-z), and numbers (0-9), 


CeGe> Volume Set_Name 


The volume set name must consist of at least 1 and not 
more than 12 characters. The name may be made up of up- 
per and lower case alphabetics (A-Zean-z)se and numbers 
(U-9), | 


a. crm J. Ome wee ae (“ee 


The internal file name may consist of from 1 to 6 al- 
phabetic (CA-Lea-2) or numeric (0-9) characters. 


é.f Cataloued File Placement 
c.f.! Mass _Storaye File 


Cataloged disk files will alwaysS reside on the same Volume 
Set as its defining cataloy structure, Howevers, FMS does 
provide options at file creation to allow the user to place 
a file on specitic volumes within the Volume Set. An option 
1s also proviced to request that the file be spread across 
Volumes within the Volume Set. 


If neither the specific volume option nor the spr@ad option 


is Specifieds FMS will seek space on the volume within the 
VOlume Set that contains the most available space. 
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lf a volume constraint is specified for a file and enough 
space 1S not available on the specified volumes, the file 
create reyuest 18 denied. when FMS selects the volumes de- 
mial occurs only when inSufficient space is available on any 
volume nn the volume set. 


if a file 18 yrowns the request may specify the volume(s) on 
which space for yrowth is obtained. If a specific volume 
was nameds growth 75 constrained to that volume. when a 
specific volume 31s not specified an attempt is made to grow 
the file on tne volume that contain tne last extent of the 
file. if space 18 unavailable there and a specific volume 
waS not Nameds Space 18 sought on the volume within the set 
with the most available space, Finally, if unavailable 
there, the request 1s desirea. 


eefsc Tape_Files 
Cataloyed tape files are always assigned to a specified Tape 
Volume Set. Options are available to request that the file 
be assiyned to a predefined volume set or ona new volume 
set that will be created from available scratch tapes. 


The description of tne cataloyed tape file is always placed 
on the bisk Volume Set indicated by the pathname. 


4, 


e.d Hass Storage Space Control 


There are three places where the amount of mass storage 
Space to pe used can be specified. These ares 


1. Account Record -~ the maximumn amount of space on the Vol- 
ume Set that can be used both for catalogs and files 
cataloyed under the account. 


birectory - the maximum amount of space on the disk Vol- 
ume Set that can be used poth for catalogs and files 
cataloged under the directory. 


RU 
6 


3. File description - the maximum amount of space to be 
assigned to the disk file (but not for a file on magnetic 
tape). 


Each maximum can be specified to be unlimited and each can 
be chanyed. When a maximum specification is changeds it can- 
not be changed to be less than the amount currently 
assigned. 


The account maximum 1s checked on each file create or modify 
and each file grow. Tne file maximum is checkeds of courses 
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ea 


? 


only on each growth of that file. Where the maximum would 
be exceeded» the request for file create, modifys or file 
growth 15 denied. 


File or directory delete releases spaces thereby decreasing. 
the amount currently assigned and increasing the amount that 
may be newly assigned. 


The initial amount of space to be assigned a file Cexcept 
for a file on magnetic tape May also be Specified. when an 
initial amount 18 not Specifieds the maximum cannot be 
specified and it 1S assumed to be one allocation unit. If 
an initial amount but no maximum is specified, the initial 
and maximum amounts are assumed to be the same, 


The File Generation capability allows a user to establish a 
cataloged set of Successives functionally related files 
knOwn aS a Generation Set. The filess called generation 
files or simply generationss are ordered as they are created 
so that tne latest generation or previous ones may be easily 
retrieved. This also allows ovsolete generations to be auto- 
matically celeted. 


A yeneration set may be used to automatically retain previ- 
ous versions of a file when it 156 updated or to collect sets 
cf related data for subsequent retrieval and processing. 
Tne generation set addressing technique and automatic file 
creation allows a data collecting or updating job to be 
executed any number of times without requiring any change to 
the job control statements. 


The generation set may contain files that reside on remov- 


able aiskss non renovadle diskS, or magnetic tapes. Each 


file will be cataloged and maintained by FMS» therefore all 
Services proviced by FMS including prevention of 
unauthorized access, mass store space controls, protection 
against device or incomplete updates, etc. are available for 
generation tiles. 


1 Creating _a_veneratiogn_Sset 


A generation set must be established by the user by issuing 
a CKEATE_GEN_SET comnand. The user must specify the name of 
the set and tne yeneration control mode. A default file def- 
inition and password are optional. 
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-l Generation Control Nodes 


The user must specify one of three generation control modes 
for a yeneration set. 


o Cycle 


This type allows the user to specify the number of 
generations that are to be maintained in a fixed cycle. 
The yenerations can be explicitly defined using a File 
Create function or the generations will be dynamically 
created fur each new yeneration until the set contains 
the mumber of generations specified. Once each genera- 
tion in the cycle has been created, for each new output 
generations the oldest generation will be overwritten to 
become the newest generation. 


© Generations 


In this moue, the user indicates the Number of 
generations to pe retained. The generations will not be 
recycleue, wvut aaMstead new output generations will be 
created vased on the default file definition declared 
for the set. Unce the numoer of generations exceeds the 
number of generations to be retaineds the oldest genera- 
tion will be celeted. | 


oO Retention Date 


In this modes generations are retained until their re- 
tention has expired. The retention date may be expressed 
as a calendar date (mmddyy) or as the number of days the 
generation is to be retained. Each new output genera- 
tion will be created based on the default file defini- 
tion specified for the set. Each file will be retained 
until ts retention period has expired and then it will 
be deleted. 


R 


ec Default_File_befinition 


The user may specify the options to be used for each default 
file create. Any option allowed for with a File Create may 
be specitied. The options are described with the File Create 
command in section 3.1.1.4. 


if the opticns are not Specifieds the system default options 


will be uUseu.s The system default initially defines a mass 


storage file that consists of one 512 byte control interval, 
but the default may ve modified by the System Administrator. 
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-9.e Creatinu_a_ Generation File 


A generation file may be explicitly or dynamically created 
for a generation Set. If the generation control specified 
for tne set is number of generations or retention periods a 
new generation will be created eacn time a new generation is 
required. In this Cases the default file definition 
Specified for the generation set will determine the 
attributes of tne new Yyenerations e@€.g. S1zZe@e Medias ett. 


lf the cycle control mode is specifieds the usSer may choose 
to predefine each generation using the File Create function. 
This option allows the uSer to assign specific tape volume 
sets to each yeneration or to spread the disk generations 
across volumes of the volume set. Howevers if any of the 
generations of to set are not detined ty the time it 1s 
reyguirea for outpute a generation will be created using the 
default file definition. 


when @ File Create is used to explicitly create a genera- 
tions the nane of generation set must be used as the 
pathname. Ctnerwise the create command 1S the same as that 
Lsed for any non generation file. 


»-5 Adgressing Generation Files 


A generation file may be addressed aS a relative or absolute 
yeneraticn. 


€-%¥.5.1 Relative Generations 


The generations in the set are maintained in an order that 
represents the relative age of the files within the set. 
This allows files to be referenced using a relative genera~ 
tion number. 


when @ new generation 18 created it becOmes relative genera- 
ti0n- J. When the next generation 18 created, it becomes 
generation t and the previous generation becomes -1. Simi- 
Larly when the mext generation created it becomes relative 
generation U and the previous generations are shifted by 71. 


In order to address a generation file using a relative file 
numbers the number preceded by an asterisk (*) must be 


appended to tne generation set name. For examples 


GEN _SET_A*U indicates the last generation 
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GEN SET _A*-7 indicates the previous generation 
GEN _SET_LA*+1 indicates a new generation 


In adagitions two alternate forms are allowed. The key word 
*LAST may be suostitutea for *G and *New for *+1. 


When relative generation mumbers are used within a multiple 
activity jobs all referencing must be relative to the status 
of the generation set at the beyinning of the job, 


ece%e35e.c ADSOLlUte _benecatiogos 


A unique identifiers called an absolute generation numbers 
is also assiyned as each file generation 17S created. Once 
assigned to a yenerations, this number never changes. This 
allows a specific file generation to be accessed regardless 
of its relative position in the set. 


The first generation created following the creation of the 
generation set will be assigned absolute yeneration number 
Te tach subseguent yeneration for the set will be assigned 


the next higher adsolute generation number. This number 
will be incremented from 1 to 9999 and then will start over 
at 1. 


To address a generation using the absolute generation 
identifier, the nutibers preceded by an asterisk and an upper 
case G muSt be appended to the yeneration set name, For ex 
amples: 


GEN _SET_&*GOU15 specifies the 15th generation 


2-9.4 Allocating Generationo_files 


A generation file may be allocated to a job using a GET job 
control statement or dynamically during execution of a pro- 
gram by issuing a "GEMORE”™ call. 


o Input 


For inputs the generation may be addressed using either 
arelative or absolute generation name. The generation 
set's password and access control list will be checked 
to ensufe that the requestor has the proper permission 
to read the specified generation. If permission is 
yranteds the generation will be allocated for read if it 
1S not currently allocated to any other job. 
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O Input Concatenation 


Concatenriation will allow two or more generations or all 
generations of a set to be processed by a program as one 
contiyuous fite. The order of concatenation may be 
Indicated by Specifyiny a series of relative generation 
numoers separated by commas. The key word ALL may be 
useag to indicate that all yenerations in the set are to 
be concatenated. For example: 


GENLSET_A*0,-1773 


will cause the last generation 
to be reads, followed by rela- 
tive generation -1lsz and then 
generation -3. 


GEN SET_A*®ALL 


wilt cause each generation of 
the set to be reads starting 
from the oldest yeneration to 
the most recent yeneration. 


o Gutput 


For outputs the relative name is always used when 
creatiny a new generation. Howevers if the intent is to 
rewrite an existing generation then its absolute genera- 
tion name must be used. 


The generation set's nassword and access control list 
will oe checked to determine whether the requestor has 
permission to write to the file. If so, the allocation 
of arm output yeneration will proceed based on the gener- 
ation control mode for the set. 


o Cycle 


If the number of generations specified have not been 
assigned to the sets a new generation will be 
createaq taSed on the default file definition. This 
new generation will be reygistered in the generation 
set catalog record and the file will be assigned to 
the job, Once all generations have been created, 
the oldest generation will be allocated as the new 
output file. 


© Generation or Retention Date 
A new generation will be created based on the de- 


fault file definition for the set and it will be 
assigned to the job. 
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begllocating Generation _FEiles 


The action to be taken Guring deallocation depends on the 
disposition code Specified when the generation was 
allocated. 


2.49.0 Cutalog Maintenance 


Generation files may be maintained like any other cataloged 
file. They may be Listeus deleteds and their attributes 
modifieu using the standard FMS commands. The only differ- 
ence 18 tnat absolute generation numbers must be used to ad- 
dress the yenerations. 


é.¥./ Generation File Statistics 


eeu 


Information about the generation set and generation file, 
e.g. absolute and relative generation numbers volume iden- 
tification, media type-, creation date, Last allocation dates 
etces will be maintained for each generation of the set, 
This antformation will be available to the user as part of 
the inturmwation returned by the LIST function. 


To provide an audit trails an accounting record will be 
written to the Statistical Collection File each time a new 
generation 18 created or deleted, 


owe ae ee — we ee oe ae a mm Onl ee - 


The file management system and file content managers will 
maintain an attribute block for each cataloged file in the 
system. The purpose of this attribute block is to provide 
information that would otherwise need to be specified on job 
control statements each time the file was accessed. This 
informatiun need only be provided once when the file was 
written. The information will be maintained as long as the 
file exists. Some attributes may Subsequently be permanent- 
Ly modified or temporarily overridden for the duration of a 
POD 


1-28 June 254 1979 - 99:35 


2.10.1 Jypes_cfi_Attributes 


There ure tnree types of data commonly referred to as 
attributes: 


o File Content Attrioutes 


File Attributes are those characteristics which specify 
the physical and tlouwical properties of a file, such as 
control interval size or recording node. These attributes 
go not vary by users and are fixed for a given file. 
Since they are needed for any access to the files they are 
saved in the catalog for the file when the file is built. 
These save@éc attributes are used to enSure that subsequent 
requests to access tne file are Legitimate. 


o File Access Attributes 


File Access Attributes are properties of the accessing 
progrdats such as Access Level. For a instances, a program 
thay be written to access control intervals» or 1t may be 
writtem to access recordss put it may not be written to 
access botn control intervals ana records at the same 
time. This type of attribute must be specified at Open 
times at 18S not saved and cannot be overridden. 


o File Use Attributes 


File Use Attributes are properties relating to the uSe of 
a files sucn as the number of buffers to be used in read- 
ng or in writing the file. This type of attribute is in- 
dependent of both the file and the program. For example, 
a program may use 10 buffers for a file during one execu- 
tion and 100) buffers during the next executions without 
changing the program or the file. These attributes are 
not saveds put can be overridden in some cCasess as 
explained later. 


There are three methods or times to specify attributes. The 
resolution of conflicting specifications iS done according 
to the Overriding RuleS, as explained later. Not all 
attributes can be specified ain all three ways. The three 
ways to specify attributes are: 


o Compile Cor Gpen) 
Compile Cor Open) attribute specifications are passed to 
UFAS ain the File and Access Definition (FAD). These 


attributes are placed in the FAD by the compiler or by the 
corresponding run-time subroutines, In either cases they 
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are presented to uUFAS by the caller when the file is 
Opened. 


o Job Control Statements 


Attricute specifications are supplied by the user in the 
cominand language for the job. These specifications are 
obtained from GCOS IV by the UFAS Open procedures, and are 
merged with other specifications. These specifications 
are important for programs written in languages such as 
FORTRANs which have little ability to specify attributes 
in the source program, | 


o File Create 


File Create attribute specifications are supplied by the 
user at the time the file is created. [hey are saved in 
the catalo, for the file until the UFAS Open procedure 
obtains them. 


2e.1U.5 vyerriging Rules 
Overridinyg rules are used by the UFAS Open procedure to 
merge the attribute specifications from the three sources. 
These rules can be OSroken into three groupss corresponding 
to the three types of attributes: 


o File Access Attributes 


File Access attributes are really attributes of the 
accessing proyram, Therefores they can only be specified 
in the File and access definition (FAD) at compile (Cor 
Upen) time, There 1S no provision to specify these 


attributes with ECLs, or in File Create. These attributes 
are not  Savea ian the catalog as are other attributes. 
Since there is only one place to specify these attributes, 
no conflict 318 possible. Therefores the Overriding Rule 
1S 


-File Access attributes can oanly be specified in the 
FAD. They cannot be overridden by ECL specifications 
or by File Create specifications. 


o File Use Attributes 


File Use attrioutes Specify the way a file iS used for a 
particular SeSS10Ms Since they are . independent of both 
the program and the files these attributes can be 
Specified in ECL. A default can be specified in the FAD» 
for a specific files but the default is always overridden 
by a corresponding ECL specitications if present. These 
attributes are not saved in the catalog and cannot be 
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specifiead in File Create. Therefores the Overriding Rule 


s¢é 


-A File USe attriosute 19 the FAD Cor the defaults if not 
specified) is overridden by an ECL specification. File 
use attributes cannot be specified in File Creates and 
are not Saved beyond the allocation of the file. 


ile Content Attrioutes 


lle attributes belony to the file itself, ands thus» are 


ved in the catalog for the file during the Life of the 
le. Some of these file attributes can be specified in 
e File Create primitive. The rules can be separated for 
isting files and for new files being built. 


New Files 


fdany more attributes can be overridden for new files 
than for existing files. Some attributes, such as 
key-offsets, cannot be overriddens since the accessing 
program depends on them. The Overriding Rule iss 


~In output processing modes file attributes specified 
in the FAD are overridden by ECL specificationss if 
present. Either of these specifications 15 
yverridden vy File Create specificationss if present. 


Existing Files 


since file attributes describe actual physical 
properties of a files, none can be overridden once a file 
Is built. Sone FAD or ECL specifications, if presents 
must agree with existing attributes. For examples if an 
accessing progran specifies binary recording modes and 
the allocautea tile is in ASCil recording modes an error 
exists. it iS apparent that any accessing program must 
interpret recorus differently for each of these two 
cases. Other attribute specifications in the FAD, such. 
as control interval sizes may be safely ignoreds and the 
attribute Saved in the catalcoy is used. This provides a 
level of data independences, in that a given program Can 
access files with ditfering control interval size with- 
out reconpilation. The overriding Rule iss: 


-Inr Inputs I1/0- or Append processing modes, file 
attributes saved in the catalog for the file are 
useds and Cannot be overridden, Any file attributes 
Specified in ECL must agree with these existing 
attributess or an error exists. Some file attributes 
specified in the FAD must agree with existing 
attributes, but some are ignored. 
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4 modification_of_Attributes 


Since File Access and File Use attributes are not saved, 
they need not be modified. Therefores of concern are those 
File content attributes which mays or may not be modified. 

Since these attributes describe actual logical and physi- 
cal properties of the file, they cannot be modified witnout 
corresponding cnanyes to the file itself. For instances if 
the Control interval size specification 18 to be changeds 
each control interval in the actual file must be changed to 
the new size. Therefore, these properties should be changed 
by the File Restructuring Utility. This program will make 
the appropriate chanyes to the file itselfs and then will 
modify the existing File attribute specifications so that 
they ayree with each other. There is no need for. a 
user-visiovle File Modify function to change these 
attributes. 


bile Security 


Uneuthorized use of a cataloged file may be prevented by 
means of an access control lists security classs and 
passwords. Audit records way also be specified to show file 
uS 2ue, 


4 
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Access Control 


Access control allows individual users to grant or deny oth- 
er users access to their files and directories at their own 
discretion. Access control tists (ACLS), which regulate 
this type of accesses allow individual users to allow access 
om @ pertmuser baS1S. The users cén exercise control only 
within those portions of the catalog hierarchy where they 
themselves have the proper access rights. 


1.27 Access_Identifier 


in order to grant the User distinct access right it 18 nec~ 
essary to ve able to identify the different users. For this 
purposes, each process (tenant) has a access identifier that 
is fixed for the life of the process. This identifier 
consists of four conponents that are used to delimit use of 
the resource as follows: 


O PerSon 1d - Individual that may access the resource, 


o AcCount Ia - account under which the resource may be 


accessed 
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co Wode id —- network node from which the resource may be 
accessed. 


Oo Vomain id - execution domain that may access the resource, 


Ceoiiezlnc AccCess_kiyghts 


The access rights are the modes in which filess directories,s 
and Link may be processed. These rights allow a user to 
stipulate several different kinds of access on the same en- 
try im the catalog structure if he desires, 


Tne access rights for directories are: 
lodify CM) the attributes of files directories and 
Links contained in the directory and cer- 
tain attributes of the cirectory itself can 
oe modified. This mode also allows 
existing tTiless directories or links 
contained in the directory to be deleted or 


4 


iisted. 


; 


Modify lentity (XxX) the directory's 
attributess including the access control 
Lists can be modifieds Listed or deleted, 


bast: “CL the directories attributes may be read by 
the process. 


Create (C) new filess directories and links can be 
built immediately subordinate to the direc- 
tory e 

Delete (Dd) the directory and alt subordinate 
directoriess files and Links may be 
deleted. 


This permission has been included for GCOS 
L1lIl accommodation. 


Wult CN) the process may not access the directory in 
anyway. 


The access rights for files and file generation sets ares 
Read CR) allows data to be read from the file. 
write (Cw) allows data to be written to the file. 


This can oe used to changes deletes add, 
Insert records in the file. 
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Appenu CA) allows data to be written to the end of a 
Seyuential/relative file. 


Execute (&) allows transfer of information from the 
program tut only for a compiler or loader. 


Null Cn) the orocess cannoat access the file (de- 
Scription or content) In any way. 


Modify Entity €x) the file attributess including the 
file's access control list can be modified» 
Listed or deleted. 


pelete CD) the file description and file space can be 
deleted. 
This permission has been included for GCOS 
lli accommodation. 


kecover (CF) allows data to Le written to a file when it 
1s abort lockec or has defective space. It 
also allows the abort Lock to be set or 
reset, 


The access rights for Links are: 
Modify_lentity Cx) the Link's attributes can be 


modified and Listed or the link may be 
deleted. 


belete (€b) the tink can be deleted. 
Null nN) the process cannot lists modify or release 
the Link. 


Cw lteluS QEEucture OF an ACL 


am cm Cie Che ED ies as (tee ine caw =e 


The rights that different user processes have when referring 
to a file or directory are specified as an attribute of that 
files directorys or link in the form of a List called the 
access control list CACL). Each entry of the List specifies 
a set of processes (Cactually a set of access identifiers of 
process) and the access modes that members of that set can 
use when referring to the files, directorys or Link. On di- 
rectory ACLSs modify mode cannot appear without list mode, 
On tile ACLS» write and execute moues cannot appear without 
read mode. 


If the requesting user 1s the creator of the file or catalog 
for which the action was requested,» the user 18 considered 
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to have permission, If the request 1s not from the creators 
only those access modes actually granted in an ACL entry are 
Given to the specified user process. For examples, if the 
ACL of a tile contains the modes read and execute for a spe- 
cific usérs then that uSer's progress can fetch data from 
the file and transfer to and execute instructions in the 
files but it cannot modify data in the file (because the 
write access mode was not granted). 


tach ACL entry designates certain access modes and 
ldentifies the users that have these access modes. Since 
each user process 1s identified by an access identifier when 
the process 15 created Cexplained above), it would seem log- 
ical to use that identifier to desiynate a user in the ACL 
entry. Howevers, if access identifiers were used to specify 
every user process that could access a file or directory, 
the ACLs would become extremely cumbersome. 


Groups of user processes Can be identified by a process 
class twdentifiers whichs like the access identifier consists 
ot a four-component names: . 


<person_1d>.<account_id>.<node_id>.<domain> 


Altnough it can be jaidenticatl to an access identifiers, a 
process identifier yeneraily is used to designate groups of 
processes by replacing one or more components with an aster- 
isk (*). Since the asterisk means that any string can be in 
that component positions a process identifier with an spe- 
cifically named components (1,.@.4 those components that are 


not an asterisk). For example, rather than requiring multi- 


ple entriess the user could specify ail members of an acm 
counts regardless of the person _ids network nodes or domain 
by using one entry: 


* ,DEMOL*.* re 


A single process can be @ member of more than one process 


class. This situation can Lead to ambiguities on ACLS when 
more than one entry applies to the same process. To elimi- 
nate this ambiguity and make ACLS more easily readable, four 
conventions are imposed on ACLS and their interpretation. 
Firsts no process class identifier can appear more than once 
on any ACL. Seconds the ACL 15 ordered as explained below. 
Third, the entry that applies to a@ given process is the 
first entry on the ordered List whose process class contains 
the given process. Finallys if no entry exists on the list 
for a given processSs that process has no access to the file, 
directorys or Linke These conventions ensure that the ac- 
cess for every process 18S uniquely specified by the ACL. 


i ete June 25% 1979 - 09:35 


ae ae 


To properly generate and modify ACLs» it 185 necessary to 
have some understanding of how they are ordered. The 
ordering rule is to distinguisn between specifically named 
components and asteriskss beginning with the leftmost compo- 
nent ot the process identifier. The entries to be ordered 
are first divided into two groups, those whose first 
C(Person_id) component is specific C€i.e.r not an asterisk) 
and those whose first component 18S an asterisk. Those with 
a Specific first component are placed first on the ACL. 
Within these two yroupss a similar ordering is done by sec~ 
ond (ACcountlid) component with the specific entries again 
being first. This produces four yroups. within each of 
these tour groupss a similar ordering 1s done on the third 
Cnode_1id) component to produce eiyht groups. 


In order to enSure that these service processes have accesss 
the file system routines automatically place the ACL entrys 


*eSYSTEMI*.* rw 
on the ACL of every files and the ACL entry: 
*.SYSTEM.*.* i mec 


on the ACL of every directory when the file or directory 1s 
created or its ACL is entirely replaced. in this ways 
members cf the Systen project are automatically granted the 
necessary access so that they can perform their functions, 
indivigual users need not remember to put the proper entries 
on all of their file and directory ACLS to make use of the 
Service processes, 


under special circunstancess some user might not wish to use 
the facilities of &@ service process on some of his files. 
In this case, the user simply denies that service process 
access to his files Dy mocifytng the ACL entry (1.e.4 giving 
that service process null access). It is crucial that a us- 
er who elects not to receive such a system Service be fully 
aware of the nature of the service and the consequences of 
his choice. For example, if the backup processes are not 
permitted access to a files, backup copies of the file cannot 
be made and the file will not survive certatn types of sys- 
tem failure, 


125 Initial ACL's 
In addition to automatically adding a service process entry 
to the ACts of all newly created fileS and directoriess many 
System commands and subroutines Ce.wg. create and create_dir) 
add an entry for the creating process to the ACL of a newly 
created file or directory. For conveniences the system 
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allows a user to specify a list of entries to be added to 
alt newly created files or directories, in addition to 
entries for the creating process and the Service processeS-» 
This ability eliminates the need to explicitly modify an ACL 
each time a new file or directory 1S created. 


TindS List ot ACL entries to be added to newly created 
segments or directories is called an initial access control 
List or Initial ACL and is an attribute of a directory, 
Each directory has two sets of aianitial ACLS» one set for 
file appended to the directory and one set for directories 
appended to the directory. Then, the appropriate initial 
ACL (i.e. either the one for files or the one for 
directories) of the containing directory is merged with the 
ACL. The merging of two ACLS means that the entries are 
combined and sorted. If two entries on the resulting ACL 
contain the same process class leaving the newly added en- 
try. In this ways the service process entry originally on 
the file can ve overridden by placing an entry with process 
class Tdentifier *,system.* on the initial ACL. Finally» 
any entries specified in the operation of creating the file 
or directory Cfor most system commands this 1s simply one 
entry for the creatiny process) are merged into the ACL. 
These entries override the service process and initial ACL 
entries if duplicate process class identifier exist. 


The initial ACiL entries have the same format aS described 
abOvee In additions a special character "S$" Can be used in 


place of either the person_id or the account_id components 


to reyuest that the file or directory creator's account _id 
are to be substituted. This method must be used whenever it 
1s necessary to create an ACL on the new file or directory 
that has different permissions than would automatically be 
provided py the create function, 


The detault value for the initial ACLs of a newly created 


directory 1S enptys i2e@er there are no entries in the ini- 
tial ACLs. 


“y 


ec Bomalnos 


To be supplied. 


> security Class 
The Security Class defines the security authorization neces- 


Sary to access the object. It consists of two parts - a 
level and a category set. 
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2211.45.17 Security Level 


The system has a fixed number of levels that are total- 
ly ordered by the relation “less than". The security 
Level is an integer ranying from U (least sensitive) to 
? (most sensitive). 


e.li.3.¢c Security Cateyory Set 


The category set is 4 bit string of length 32 which 
defines the "need to know” required to access a file. 
For examples data may be subdivided into various 
categories such as enyineering Sspecificationss finan- 
cial forecastSs ett. Each cateyory would be assigned 1 
O14. POSITION. 


Tne category set of a file then defines the nature of 
the data it contains. 


The set of all Security classes can be partially 
ordered. Note that not all security classes are related 
oy the partial orderinys 1.@.4 two processes with re- 
spective security classes <secretsatomicom and 
<secretsNATO> are not comparable. The security classes 
and the relation "Less than" define a lattice since 
there 45 & minimum and maximum level and a set of 
cateyories. This will ensure that information can only 
flow upward or remain at the same levels unless specif- 
le rights to reduce the level have veen specified. 


The Security class ca only be chanyed by the security 
administrator. 

2.11.5.5 Security Class Checking 
When attempting to reads Executes or List a files the 


following conditions must apply In addition to an ACL 
matche 


fF 


o user's security level >= file security Level. 


v 
ii 


o user's category Set file category set. 


where the >= for tne category set comparison means that 


the user's cateyory set must include the file's catego- 
ry set of be egual to: 7ts 
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For writes, recoverys or modify accesss the following 
conditions must applys 


O user's security level file's security level. 


ti 


oO user's cateyoOry Set file's category set. 
Tne star Convention does not apply to security levels 
and cateyory sets. 


The reason for the difference between the read and 
write checking is to guarantee that the security of da- 
ta may only be upgraded (made more sensitive) and never 
down graded except by admininstrative actions not by 
copying it into an non secure file. 


Some method must one Supplied which will permit the se- 
curity administrator to create a condition where a 
process may down grade the security of data. 


a he camp. a OE 


Unauthorized used of directories an files can also be 
prevented by means of passwords. The passwords can 
optionally be specified tor any directorys file or file gen- 
eration sete 


If a password 1s specifieds every reference to the names for 
wnicn tt 3S Specified must be accompanied by the password. 
If no password 1s specifieds howevers none can accompany the 
name, 


when a paSSwWord does accompany a file or directory names, the 
name is written followed by a dollar sign ($) and the pass- 
WOU. The passwords are at least 1 and not more than 12 
characters. it may consist of upper and lower case 
alphabetics (ArtZear7z) and numerics (0-9). 


Instead of a single password being specified for a file or 
Girectorys a list of Dasswords can be specifieds atong with 
the tine of day during which each of the passwords applies, 
Tnis allows several passwords to be specifieds each of which 
may pe uSed during the specified time of day. 


Another use of timed passwords is to constrain the interval 
of time during which the file may be referenced. Once a file 
has veen allocated (by submitting a request for it during 
the time that it can be referenced)s the file can be read or 
written beyona that time for as Long as the file allocation 
remains active. 
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To specify a timed paSSwords each password is followed by a 
culon (Cid- the startiny times, a commas and the ending time, 
Any subsequent timed passwords in the List will be preceded 
by a blank character. The format of timed passwords is: 


“PW <password1]>s<start_time>,<end_time> <passwordd>:<start_time>,<end_tim 
<password n>s<start_time>,<end_time> 


The <start_time> and <end_time> are composed of the day of 
the week CHUs-TU-WE-etc.) followed by the time in hours and 
minutes using a e4& hour clock. It the day of the week is 
not specitieéds the time will apply for each day of the week. 


é€e11.5 Auditing 


Am auditing mechanism 31S provided that allows still another 
level of security In the form of a monitoring and reporting 
Capability based on authorized or unauthorized attempts to 
use files or modify the catalog structure, The following 
events may optionally be monitored ana recorded as they ocr 
cur on a specially cesiynated system file: 


The following events that can affect the security of a file 
will be recorded: 


1. creations modification or deleticn of an account or users 


cow Creations mOdification or deletion of directoriess lLinks-s 
generation setss and file descriptions. 


Se creation of &@ new yeneration in @ g@neration set 
4, setting or resetting of an avnort tock for a file. 


Se allocaticn of 2 file when the request is denied because 
reguired access rights 18 missing or if the request is 
accepted or denied. 


G. attempt to perform an action against the file which is 
not permitted ~ such as a write to a file when Only read 
allocation was requested ana aranted.. 


The events are recorded on a Statistical Collection File. 
The events can then be reported by means of a program that 
reads the records from the Statistical Collection file and 
procuces reports for each record type. 


To select the recording for these eventss the installation 


enters a control card at Startup times indicating whether or 
fot audit records are to be produced. The same control card 


1-40 June 254 1979 — 09:35 


1S used to indicate whether the operator can select or with- 
draw the Selection of those record types. 


In adaitions records are produced in response to events 4 
and 5 above unly if the file allocated has had auditing 
Soecified for it. The augiting specification indicates 
whether all or only denied allocation requests are to be 
recorded. 


Accounting gou_statistics 

Accountings in the context of FMS, consists of the recording 
and reporting of space utilization on disk volume sets. 
Disk file Space statistics are maintained at the account 
level as well as tne individual file level. The type of in- 
formation desired at the account level includes the follow- 
ing? 


1. Total space currently allocated for all cataloged files 
and directories, suoordinate to an account. 

ce Time and cate of the Last change to the amount of 
cataloyed space allocated. 


3. Accumulated product of cataloyed file space and time up 
to time cf last change. 


When a chanye in space occurs -— either an increase or de- 
crease - the space currently assigned (field 1) 1S 
multiplied by the adifference between the current time and 
time ot last chanye in space (field 2) and the product added 
to the existing accumulation (field 3). Then the total 
Space currently assigned Cfield 1) 3s changed by the in- 
créase or decrease in space that has just occurreds and the 
time of last change in space (field 2) is reset to the cur- 
rent time. 


The resuit of this proceacure 1s that Space utilization is 
measured in terms of how lLony the space was used rather than 
how much is in use at the time a report of space utilization 
1S requested. 

To obtain a record of space utilization, the system adminis- 
trator cun submit a privileged command to cause a Statisti- 
cal Collection File (SCF) record to be produced fors 

1. all accounts 

2. 48n individual account 

When the record is produced» the time of Last change (field 


e) 18 reset to the current time and the accumulation (field 
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3) is zeroed. In this ways overflow of the accumulation and 
ambiguity im time 15 orevented by requesting a space utili- 
zation record. The field capacities are such that a record 
is required for tnis purpose at Least once every two years. 


In addition to producing a SCF records the installation 
receives a display of the accumulation brouyht up-to-date 
when a master or pack list 18 prepared, The display does 
not zero the accumulation or reset the time of last change, 
howevers aS an SCF recoru production doess since it is 
expected that the report will be used only for information 
and not to prepare accounting charyess as the SCF record 18s 
used, | 
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5.U Extecoal_ioterfaces 


$3.1 software Interfaces 


The FMS Services are divided into two setss those available 
to the user through ECL commands and direct calts from a us- 
er proyram anu those services only available to System 
Programs sucn as resource manager and UFAS. 


3.121 ECL Commands 
Se1.21.1 Creste Directory 


This function will create a new directory that may be 
referenced by the indicated path name, 


Formate 
CKEATE_LDIR <patnhname> t<ctrl_largs>] 
Where: 
<patnnameos<;= 
1s the name of the directory beiny created, 


It may be either a relative or absolute 
patnnatie, 


are control arguments taken from the fol- 
lowing sets 


indicates that the subordinate disk files 
are relateq and must be maintained at the 
Sane update base. Refer to Section 2.5.44 
for additional details. 


“Pw<paSswordos3s= 


is the password that must be supplied for 
each reference to the directory. 
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Motes: 


1. The newly 


created directory's ACL 


will consist of an 


entry for the creator plus any entries contained in 
the Superordinate directories Initial_ACL_DIk. 

Ce This function may be executed by anyone’ that has 
create permission on the superior directory. 

5. The absolutized pathname niust be unique. 

4. ALL Superior directories must exist. 


a ee re 
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This function wi 


rectory. 
Format: 
MUDLFY_BDIRECTORY 
Where: 
<pathnamer>-ss= 


12s 
modi 


<ctrllargs> 


a fe 


Ll modify attributes of an existing di- 


<pathname> <ctrl largs> 


the name of the directory to be 
fied. 
control arguments selected from the 


following sets 


“Pw<paSsSsword>s:= 


is 
acce 


Indi 
are 
same 
for 


the 
SSING 


password that must be used when 


the directory. 


disk files 
Maintained at the 
to Section 2.5.4 


that the subordinate 
related and must be 
update base. Refer 
additional details. 


cates 
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Se leleS. Delete Directory 

Tne function will cause the specified directory to be 
deleted. In additions all subordinate directories, 
Links and files will be deleted and space that they oc- 
cupy will ve returnec to the system, 

Formats: 
DELETE_LDIR <pathname> <ctrl ary> 

Wheres 


<patanameoss= 


1s the name of the directory to be deleted. 
The star convention can be used. 


<ctrl_lary> 


The following control argument can be used 
with this tunction; 


Sedo “Ot oa Se 
specifies that ali Subordinate files must 


be overwritten prior toe being deleted to 
protect sensitive data. 


Notess 


1. ThiS function may be executed by anyone with modify 
or celete permission. 


ee If a subordinate file to be purged resides on a tape 
volume set that 18 not mounted an indication will be 
wade in the corresponding volume set definition en- 
try to cuuse the overwrite of the data the next time 
the volume set 1S mounted. 


5. If any subordinate file is busys the release of the 
file will be delayed until the file is deallocated. 


Tnis function will create a new file which may be 
referenced by the inaicated pathname. 
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Formats 
CREATE _FILE 
Where: 


<pathnamer:s: 


<ctrloarygs> 


nai Ome Cameo ps We oie Oe 


<pathname> (C<ctrtl_largs>] 


it 


is tne name of the file being created, It 
may de either a relative or absolute 
pathname and may include a specific ygenera- 
tion identification 


gre control arguments chosen from the fol- 
lowing set: 


1s the number of bytes tin a control inter- 
val. The value <nnnn> must be a multiple 
of €56 bytes. The default is 512 bytes. 


~SiIZt or -3sé2Z <size-T>tl-V<rel_vol_number>{IS<number_vol>J 


L<size-d2d>,V,rel_vol_number>l]... i: 


This entry 18 uSed to express the initial 
size of a disk file expressed in control 
intervals and optionally the explicit 
placement of the file, 


Size7l 318 required to specify the number of 
control intervals in the first Cand possi- 
bly only) section of the file. The 
rel _voivlnumber 1s used to  aindicate an ex- 
plicit placement of the file segment On a 
Specific volume Of the volume set. If the 
field iS not supplieds FMS will dictate the 
file placement. An Sys plus @ number 
indicates that the file 15 to spread equal- 
Ly across n volumes. 


SubSequent Pairs of parameters’ size and 
rel_vol_inumber,s may be used to explicitly 
control the spreading of the file to other 
volumes in the volume set, 


Examples: 
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Pt. oh. = Si Ze 100 


Create a file Av consisting of 100 
control intervals. The file space will 
be placed somewhere on the same volume 
set as the catalog. 


FC 3 -SIZE 2004S 


Create file 8, consisting of 200 con- 
trol intervals» spread across the yvol- 
ume set that contains the catalog. 


FE C -SIZE 10U,V1 


Create file Cv consisting of 100 con- 
trol intervals on volume 1 of the vol- 
ume set Containing the catalog. 


FO Db -SIZE SU-V1 25eV2 256VG 
Create a file Ds where 50 #control 
intervals (CI's) with be placed on 
volume 1 of the volume sets 25 CI's on 
volume ev and 25 CI's on volume 4, 
~TAPE <vol_set_name> ii 
this option is used to indicate that the 
file will reside on a predefined volume 
Set. 


~STAPE [Uc<scratch_vol_setojlsnn] is 


7s used to indicate that the file should 
reside oon tapes obtained from a scratch 


volume set. If a scratch _vol_set 1s 
specified, the scratch tapes will be 
obtained from that volume set. If nots the 
tapes will be obtained from the 
System _scratch_vol_set. The user must have 
modify permission on the specified 


scratch _vol_set. 


The number of volumes required (nn) may al- 
so be specified. The default 1s one tape. 


1-47 June 254 1979 —~- 09:35 


“DceW<nn>s : 


—~Tik C7E3 


“MAX LSTZE 


~INC Side 


al 
Cd 


if scratch tapes have been requestéds this 
opt?1on is used to indicate the tape's den- 
Sity. Where 2454316764 or STD (standard) 
are valid options. STD is the cefault. 


i 


if scratch tapes are requesteds this option 
Indicates whether 7 or 9Y track format 
Should be used. if not specifieds the site 
Standard will oe uSed. 


or mMSZ <Size>z::2 


the maximum $1zev expressed In 6 control 
intervalss to whicn the file may be grown. 
The default is unlimited growth. 


or rISzZ <silzge>iz= 


is the number of cecntrol intervals the file 
will be grown each time the file is 
dynamically grown. The default will be by 
one eighth of the current file size. 


“REC. MOD. OT = kM: 22 


“RDATE {Immddyyltnnn} 2:5 


“MONITOR : 


-ROLLBACK 


indicates that the file must be retained 
until after the specified date. The date 
May be expressed aS a calendar date 
Cnmddyy) or as a relative date (+tnnn). If a 
relative date 1S specifieds the retention 
date will be calculated and saved in mmddyy 
format. 


Or “he: 53> 


indicates that a before image Should be 
taken for each change to the file content 
and that the file will be rolled back fol- 
lowing any program or system abort. 
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“JRNL or ~J g::: 


Indicates that all chanyes to the file con- 
tent will be journaled. 


~pDUP L<size> ds: 


ae 


Specifies that a duplicate file should be 
created for this file to protect against 


device failure, The size and location 
parameters allow the size and location of 
tne duplicate file to be explicitly 


specitiea. Kefer to the -SIZE option for a 
description of the parameters. If the size 
is not specifieds FMS will obtain space on 
volumes in the volume set not assigned to 
the original file. 

“VERLFY or -V is 
specifies that each write to the file must 


be yerified. 

“PURGE Or =? 25s 
will cause the file to be overwritten when- 
ever it is released. 

“AUDIT or -AUD CALLICDENIED} s:= 
indicates that allocation requests for the 
file should be audited. The parameter also 
indicates whether all allocations or only 
denied atlocations are to be monitored. 


“PW<paSSWOrcgo iss 


1s the password to be supplied when 
requesting access to the file, 


-~{FN <internal_file_nameos3:= 
Allocate the newly created file using the 
specified IFN. 


Thy S option assumes that the ECL command 
interpreter as available. 
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Notes: 

1. The newly created file's ACL will consist of an en- 
try fur the creator plus any entries contained in 
the Superordinate directories Initial_ACL_File. 

2. The absolutized pathname must be unique. 

5. THis function may be executed by anyone that has 
create permission on the superior directory. 

32121.5 Modity File 


Tnis function allows a user to modify attributes of an 
existing file 


Formats: 
MODIFY_FILE <pathname> <ctrl_iargs> 


wheres 


HE 


<patnname>s;: 


is the name of the file to be modified, It 
may ove eitner an absolute or relative 
pathname and may include a specific genera-~ 
tion identification (see naming convention 
section 2.5) 


<ctrilaryso 


are control arguments chosen from the fol- 
lowing set: 


it 


“MAX SIZE or -MSZ <size> 


es 
ee 


The maximum size of the file expressed in 
Control Intervals. 


FE 


“INC SIZE or -1SZ <sizeo 3: 


is the number of control Intervals to be 
added to the file each time tne file is 
uUynamically grown, 


“PW<passSword>ss= 


1S tne new password to be used when 
requesting access to the file, 


“AUDIT or -AUD CALL IDENTED)$ o= 
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1Nd1 
file 
1nd 
ageny 


—~KDATE {mmdayylt 


~wkKITE_ LOCK 


“VERIFY or - 


“HONG TOR 


-RULLBACK 


~JRNL or 


~DUPL<sit2z 


“PURGE or 


& om 
ae™ 


or 


“J 


e> 4 


~~ 


deft 
file 
enda 
Ctnn 
the 
the 


or WwW 


orev 
over 
remo 


Low] 


Spec 
prio 


cates that allocation reguests for the 

snould ve aucited. The parameter also 
cates whether all allocations or only 
ed allocations are to be monitored. 


nnn} 
nes a new retention period for the 
The date may be expressed as a cal-~ 


r date (mmddyy) or as arelative date 
nN). If a relative date is specified, 
retention cate will be calculated and 
date saved in mmddyy format. 


= 
r 
ee 
se 
fi 


ents the file from being accidentally 
written. Once set the lock Can not be 
ved, 


ifies that each write to the file must 
erified. 


es 
ea 


icates that a before image should be 


nm for each change to the file's content 
that the file will be rolled back fol- 
Ng any program or system abort. 


icates that all changes to the file con-. 


should be journaled. 


i}cates that a duplicate file should be 
ated for this file to protect against 
1ce failure. Refer to the -D option on 


File Create for additional information. 


ify that the file must be overwritten 
r to being released. 
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Notes: 


1. This function may 0e executed by anyone with modify 
permission for the file. 


Ce Any Of the arguments except MAX_SIZE, INCRLSIZE, and 
WRITE_LLOCK may be neyated by preceding the argument 


name with an WN. For examples -NB will remove dupli- 
cate file protection from the file, 


en Ce Te CD > Ce SEP eekie eam eee 


This function will cause the specified file to be 
deleted. 


FOrmats 
wheres 
<pathname>siF 


1s the name of the file to be deleted. The 
star convention can be used, 


<ctrliary> 


The following Control argument can be used 
witn this functions: 


“PURGE or -P Sse 


specifies tnat the file must be overwritten 
prior to beiny released to protect sensi- 
tive data. 


this option will cause the file to be 
deleted even if the retention period has 
not expired. 


Notess 


1. This function may be executed by anyone with modify 
or delete permission for the file. 


2. If the file being deleted resides on a tape volume 
sets the associated volume set definition will be 
deleted if the tape volume set has been dynamically 
created for the file. However, aif the tape volume 
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set had been explicitly created through Media Man- 
agenents, the volume set definition will not be 
celeted but will be modified to remove the file's 
relationship with the volume set, 


If the file is busys the deletion of the file will 
be deferred until the file is deallocated. 


1f the file is to be purged and it resides on a tape 
Volume set that 185 not mounted an indication will be 
mage in the corresponding volume set definition to 
cuuse the overwrite of the data the next time the 
volume set 1S mounted. 


if tne current file of a generation 1s to be 
released, the next oldest generation will be made 
current. 


This function creates a link entry with a specified 
name pointing to a specified directory or file. This 
Link may be used as an indirect pointer to a: 


Format: 


o directory or file under another account 
o directory or file within tne Same account 
o directory or file on another disk volume set 


o file at another site 


CREATE_LLINK <pathname? <pointer> -[LMBX<mailbox name>J 


wheres 


<pathname>s:= 


is the name of the Link entry to be created 


<pornter-:s= 


Is the absolute pathname of the file or di- 
rectory to be referenced whenever this Link 
entry 1S used. 
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~MBUX<marilobox_name>:s3= 


Notes: 


cen 


This 


Format: 


Ve 


Le 


5ela1e6 Hogiaty Link 


1s the mailbox name of the file transfer 
work station at the target file site. This 
entry must be provided anytime the file be- 
ing referenced is located at a remote site. 


The absolutized pathname must be unique. 


The pointer and mailbox will not be validated 
guring the creation of the Link. 


This tunction may be executed by anyone that 
has create permission on the superior directo- 


ry o 


The creator wilt be assigned lists modify and 
delete permission in the created Link's ACL. 


function wittt cause the pointer or mailbox to be 
altered in an existing Link entry. 


MOUDLFY_ LINK <patnname>CE<pointer>J[-~MBxX<mailbox name>] 


where: 


<patnnameois= 


1s the name of the link entry to be 
modified. 


<pointerrs2= 


is the new absolute pathname to be 
referenced whenever the link entry is used. 


-“Mox<mairlbox namer>z:t 


7S5 the new mailbox name of the file trans- 
fer work station at the target file site. 
This entry must be provided whenever the 
file being referenced is located at a re- 
mote site. 
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NOTES S 
1. Tne absolutized pathname must exist. 


ce. The new pointer and/or mailbox will not be validated 
by this tunct ion. 


Se. This function may be executed by the Link's creator 
ur anyone with modify permission. 
321.1.9 Yelete Link 


Tnis function deletes the sbecified Link entry. It 
does net delete the entry pointed to by the Link, 


Format: 
DELETELLINK <pathname> 


wheres 


is the name of the entry to be deleted. 
Notes; 
1. Tnis function may be executed oy the links creator 


or anyone with modity or delete permission for the 
ee gs oe 


321.2.1.170 Create Generation Set 


a a ap om ON we tam CE wm ee 


This function creates a@ new file generation set that 
may be referenced by tne specified pathname. 


Format: 

CREATE _GEN_SET <pathname> <ctrl_args> 
Wheres 

<pgatnname> ::= 


is the name of the file generation set to 
be created, 


<ctri_laryso 
are optional Control arguments to be 


selected from the following set: 
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-~PwW <pasSsword> 2:3: 


-~-CYCLE <nnn> 


“GENS <nann> 


1S the new Jassword to be aPpended to the 
tile generation set name when accessing ei-> 
ther the generation set or any member of 
the Set. 


1s the number of generations to be 
maintained in a fixed cycle. 


Specifies the number of generations that 
are to be maintained in the generation set. 
The generations will be maintained as a dy- 
nanic sets where new generations will be 
created based on the default file defini- 
tion for the Set and the expired 
generations will be released from the set. 


~KLATE Linmdayyltnnnd 335 


“DFC /<file 


“MNAAG 


<cnnn-> 


18 4a request to retain each generation un- 
til the specified date. The date may be 
expressed aS a calendar date (mmddyy) or as 
a relative date (+tnnn)d. If a relative date 
1s specifieds the retention date will be 
calculated when each new generation 1s 
created. 


create options>/ 3:3: 


defines the option to be used for each de- 
fault file create. The allowed options are 
described with the File Create function, 


if this option 1s not supplieds the system 
default will be used. This default initial- 
Ly specifies a mass storayjye file that 
consists of one 512 byte Control Interval, 
but May be modified by the System Adminis- 
trator. 


e+ 
ees 
i 


This option is used to Limit the number of 
generations to be retained. lt may use 
anytime the the generation set 1s 
controlled by a retention date (-RDATE). 
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The number of generations specified may be 
from 1-256. The default will be 30. 


Notes: 

1. Tne newly created generation set's ACL will consist 
of an entry for the creator plus any entries 
contained Tn the superordinate directories 
Initial_ACL_File. 


cs The absolutized pathname must be unique. 


3. This function May be executed by anyone that has 
create permission on the superior directory. 

4. No more than one generation type option (-CYCLE, 
~GENSs or -RDATE) may be specified for a generation 
set. If no type option is specifieds the system de- 
fuult will be used. The default is initially -CYCLE 
5 (fixed cycle with three generation files)sbut may 
be modified by the System Administrator, 


Tnis function will cause the specified options for a 
yeneration set to be updated, 


Format: 

FOBUIFY GENLSET <pathname> <ctrlioargs> 
Where: 

<patnname> ::5 


is the name of the generation set cefini-~ 
tion to be modified. 


<ctrloargs?> 


are control arguments selected from the 
following set: 


“Pw <pasSsword> $3: 3:= 
1s the new password to be appended to the 
file generation set name when accessing ei- 


ther the generation set or any member of 
the set, 
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SC LOLE Sino «see 


“GENS <nnn> ¢ 


1s the acjusted number of generations to be 
naintained. 


ae 


is the new number of generations to be 
waintained. 


“RDATE Cnmdayyit<nnn>} 2:5 


“MAKRG <nmn> 


cefines a new retention period for memoers 
of the generation set. The date may be 
expressed as a calendar date (mmddyy) or as 
a relative date (+tnnn), The modified re- 
tention period will only apply to 
generations created after the change. The 
existing yenerations retention periods will 
not be modified by this function. 


¢: 
ee 


Specifies the maximum number of generations 
that should be retained in a dynamic gener- 
ation set. 


~bDFC /<file create options>/ 3:5 


Notes: 


hg 


co 
: 


provides anew set Of option for any de-~ 
fault file create. The allowable options 
are described with the File Create command. 
This new definition will completely replace 
the previous oaefault definition for the 
generation sete 


This function may be executed by anyone with modify 
permission for the generation Set. 


Tne three generation type options (-CYCLE, -GENS, 
and -RDATE) can only be used to modify the 
associated argument (number of days or number of 
generations. They may not be used to Modify the gen- 
eration set type. 


if the nutiber of generations being maintained is 


reduced by tne -CYCLE» -GENS- or -MAXG options, the 
oldest generations will be deleted. 
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Die Ne he Ice 


This function will cause the specified generation set 


and it’s members to be deleted. 


tormats: 


DELETE _GEN_LSLET <pathname> <ctrl_args> 


Wheres: 


<pataname> :3- 


the name of the generation 
geleted, The star convention 


used with this function, 


<ctrl_larys> 


set 


to 


be 


must not be 


The tollowing control arguments can 


with this function. 


be used 


indicates that the members of this ygenera- 
tion set must be overwritten prior to being 


released to protect sensitive 


WNotess 


See tg 


information, 


1. TniS function may ove executed by anyone with modify 


or delete permission. 


5 


ho 
: 

nnd 
—s 


e subordinate tile to be purged resides 


volune set that 18 not mounted an indication 
made in the corresponding volume set definition en- 


try to cause the overwrite of the data the 


the volume set 1S mounted, 


On 


a tape 


will be 


next time 


5. If any subordinate file is busys the release of the 
file will be delayed until the file 1s deallocated. 


Adc _Neme 


Add an alternate name to an existiny directorys file or 


Link. 
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— 
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Formats 
ABDLNAME <pathname> <new name> 
Wheres 
<pathname>s::= 
is the name of the directorys file or Link 
for which the additional name ais to be 
addeu, Tne star Convention can be uSed. 
new fiame>i.i= 
18 the additional name by which the file or 
Girectory 1s to be known. The equal con- 
vent ion can be used. 
Notes; 
1. Tne absulutized new_name must be unique. 


Cs This function may ve executed by anyone with modify 
permission for the entry. 


Catalogeg tape tiles may not have alternate names. 


Las 
6 


4.121.174 Delete _ Name 


This function will delete a name from a directorys file 


Formats: 

DELETE_NAME <pat hname> 
wheres 

<pathnamer-si= 


1s the name that 1s to be deleted. The 
Star convention can be used. 


Notes; 
1. unly the Specified Name is deleteds not the 
associated files directory or link. If the ex- 


ecution of tne command would remove the last 
name from the entry the request will be denied. 
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3.17.1.15 Rena 


Th 


ee. This function may be executed by anyone with 
wuodify permission for the entry 


Me 


s function replaces a Name Of a directorys file or 


Link with a New names without affecting any other names 


the 


Formats: 


entry tiay Nave. 


KENAME <pathname> Snew name> 


Wheres 


<pa 


Cne 


Notes: 


1. 


& 
8 


5421.21.16 Add 


Th 
ex) 


Format: 


ADD 


tnnamer::z= 


1s the existing name that 1s to be 
reoglaceda, The star convention can be used, 


wo ngmerog r= 
175 the name that replaces the entryname 


portion of the pathname. The equal conven- 
tion can be used. 


If the last entry name of the pathname is a star 
name it indicates that more than one entry name may 
be replaced, In this case the new name must use the 
equal name convention. 


This function may be executed by anyone with modify 
permission for the entry. 


The absolutized new name must be unique. 


Cataloged tape fileS can not be renamed, 


f3le.luvace 


S function iS uSed to obdtain additional space for an 
sting disk file. 


SPACE <patnname> 
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wWwnere: 


<pathname>ss: 


<ctri_iarys? 


“~SIZE<sizeol 


-~pUP<s1ze8>L- 


-MAX_SIZE 


of an 


ur 


Is the name of the file to be grown 


control selected from 


following sets 


optional 
the 


arguments 


e<rel_vol_number>J]::= 


the size Specifies the number of control 
intervals to be added to the file. The op- 
tional rel_vol_ number is used to indicate 
an explicit placement of the new file ex- 
tent. 


<rel vol _numoer>js3= 


1s 


used to explicitly control 
additional extent for 


the placement 
a duplicated 


file. If the argument 1s not specified and 
the file is duplicated » FMS will grow the 
Gupticate file. 
“MSZ <size>ri:s 
this is the maximum size to which the file 


1s used with- 
unlimited growth 


may be grown. 
out 4a $s1ze 


If this option 
specified 


7 4 
will ve allowed. 
Notes; 

Te This function will only grow the named file. There- 
fores when an indexed file is growns the index file 
may also need to be grow. 

Ce This function may pe used by anyone with modify or 


write permission for the file. 


3e1.1.17 Release _file_suace 


This 
file 


Formate 


RELEASE F bie 


function 
to ove reduced, 


causes the space assigned to a named disk 


SPACE <patnhname> <ctrl_largs> 
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where; 


C<patnnamer> z2= 


Is the name of the file to be reduced, 
<ctirtiarys> 


optional control arguments taken from the 
folitowing set: 


“SHRINK or tSHR 32 


will cause all unused allocated space 
to be released.i.e.w.s the extent of the 
allocated space will truncated at the 
next allocatable Space unit following 
the current end of file. This option 
is only applicable to sequential 
files. 


“SIZE or ~S% <sizeo>:2:= 


Specifies the number of control 
Intervals to be retained, The remain-~ 
der of the file's space will be 


released. 

-MAX SIZE or -MSZ <sizer>rz:= 
the maximum sizes, expressed tin control 
intervals to which the file may be 
grown, The default size will be 
unlimited growth if a specific Size is 
not specified. 


NOTES? 


1. The modify volume set command should be used to 
add additional volumes to a tape volume Set. 


é. THIS function may ve used anyone that has modi- 
fy or write permission on the file. 


Se lake lO SPL. Root bok 


This function wilt either set or reset the abort lock 
for a snecified file. 
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Format: 
ste T 
wheres: 


—~UWN 


OF 


ThnW 
tor 


Format: 
CHA 
Wheres: 


<pe 


Notes: 


ts 


ho 
 ) 


KABURT_LOCK <pathname> {-ONI-OFFD 


’ ae 


will set the abort Lock ON. Thuss 
preventiny allocation to the file unless 
the allocation requests specifies QUERY or 
RECOVERY. 


F 2 


will set the abort lock OFF, 


ge_working Directory 


s function chanyes the user's Current working direc~ 
y to that specified by the indicated path. 


NGE _ WORKING_LDIRECTORY <patnnaine> 


thnameroz:= 


identifies the new working directory, This 
may either be an avosolute pathname or a 
relative pathname that is relative to the 
work ing directory at the time that the com- 
mand 1s issued, 


lf a pathname 3s not supplied the current working 
directory will be set to the default home directory 
defineag in the user profile, 


In case pathname 15 syntactically incorrectys and 
therenpy 18 not a valid directory pathnames a message 
is returned indicating the first part of pathname 
which was not understood. In this cases, the working 
directory is the same as it was before the incorrect 
pathname was given, 


7=64 June 254 1979 ~ 09:35. 


Sele tec. SetToACL 


This function 1s 
trol entry 
or directory. 


Formats: 


usea to add or modify an access con- 


In the indicated file, file yeneration set 


SETL.ACL <pathnam 


Wheres 


<patnnamer>:s= 


<access_identifi 


<ctrllargs> 


“FILE 


or 


-F 


15 a 
be o 


<per 


wher 
with 


e> <access_right> <access-~identifier> 
C<ctrl_args >] 


he pathname of the file, file genera- 
set or airectory to which the command 
1eS. it pathname 18 ~-wWDs the working 


actory 31s used, The star convention can 


sed. 


Hi 


valid access mode for directories or 
2 Se depending on the object of the 
naine. 


er>s:= 


n access control entry name that must 
f the forms: | 


Son_id>.~<account_id>e<node_id>.<domain> 


e any of the components may be replaced 
an ey 49 


rol aryuments selected from the follow- 
Sets: 


ifies that ACL's for directories should 


icates that ACL‘'s for files or file gen- 


ion sets should be modified. 
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1. Any existing ACL entries with a matching access 
tdentifiers will receive the <accesS_right>. If no 
match 1s found an entry 1s added to the ACL. 


ce ThE uSer Must have modify access fight on the 
specifiedg directory or file. 
>» if the access identifier 1s omitteds the user's 


<yperson_id>.<account_iud>.~* 1S used, 


4. lf a file is a member of a g@neration set an ACL 
will exist only for the generation set not for each 
member of the set, Therefore a suffix specifying a 
Specific yeneration may never be used with the 
patnname on this command. 


Seleleeli Belete ACL 


The Delete_ACL fUnction removes entries from the access 
control lists CACL'S) of files or directories. 


Format: 
DELETE_LACL <pathname> <access_identifier> <ctrl_args> 
Where: 
<pathnameors= 
is the pathname of a files, file generation 


set or directory, The star convention can 
be used. If pathname 18 -WD or Omitteds the 


working directory is used. If pathname is 
omitted, the access identifier can not be 


Specified. 
<access_identifielr>:3= 


is an access control entry name that must 
be of the forms 


<per sOn_jd>.<account_id>-<node_id>.<domain> 


where any component may be replaced by an 


¥? * oa 
a 
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om ee 


Notess 


1. Any existing ACL entrieS with a matching access 
ydentifier will be deleted. 


ec. the user nust have modify access right for the 
specified directory or file. 


5S. if tne access jdentifier is omitteds the user's 
<person_id>.<account>.* 31S used. 


The function is used to add or modify an entry to a 
file or directory Initial access control lists ina 
specified directory. The file tnitial ACL contains ACL 
entries to be placed on files created subordinate to 
the specified directory. The directory initial ACL 


contains the ACL entries to be placed on any 
directories created subordinate to the specified direc- 
tory. 


Format: 


SETLINITIALLACL Spathnane> <acces$ right> 
<access identifier>(C<ctrtl_args>] 


whee: 


<patnmnmameross= 


Specifies the directory in which the ini- 
tial ACL 1s to be altered. The star con- 
vention can be used. 


<access uright> 
1S & valid access mode for either 
directories or files» depending on whether 
the file or directory Initial ACL is being 
updated. 

<access_identifier>:3:= 


7S an access Control @ntry name that must 
be of the forms 


<per Son_id>.<account_id>e<node_id>.<domaino 
Where any of the components may be replaced 


b y 4 99 * $2 - 
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COtr buat Go 


Control aryuments chosen from the follow- 


specifies that the initial ACL for 
directories 18 to be modified. 


specifies that the initial ACL for the file 
or file generation set 1s to be modified, 


NoOtess 
tT. Any existing initial ACL entries with a matching ac- 
cess identifier will receive the <access right>. If 
no match 1S found an entry is added to the specified 
Initial ACL. 
ce The user wust have modify access right for the 
specified directory. 
3. If neither of the control arguments ¢(-DIR or -FILE)D 
18 specitics the initial ACL for file 18 modified. 
3.1.1.¢3 Delete_Initial ACL 


This function is used to delete entries on the file or 
directory inittial access control lists. 


Forwhats: 


BDELETE_LINITIAL_ACL K<pathname> <access7~identifier> 
C<ctrl_largs> J 


= 


Wher: 


ct 
r 


<pathnnamerzs= 


is the pathname of a directory. The star 
convention can be used. 


<access_identifier>s:s:= 


1s an access control entry name that must 
be of the form: 


<person_id?.<account_id>.~<node_id>.<domain> 
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where any of the components may be replaced 
by a "*"™.l The <person_id> or <account_id> 
may be replaced with a "3" to cause the 
creator's person_id or account_id to be 
Substituted when a directory or file 15s 
created. 


<ctrloaryg> 


Notess 


Sete lec’ bist 


Control arguments chosen from the follow- 
ing: 


—-OITR or “Db ¢::= 


specifies that the Initial ACL for 
directories 18 to be modified. 


SPilL.& or =F 75 
specifies that the initial ACL for 
file is to be modified. 
Any existing ACL entries with a matching access 
Tdentifier will be deteted,. 


The user must have modify access rights for the 
Specifiea directory. 


This function provides a Listing of cataloy entries im- 
mediately subordinate to a specified directory, 


Format: 


LIST <pathname> (U<ctrtl_aryso] 


wheres 


<patnnamer>:s= 


Tne star convention can be used, 


<ctrl_oargs> 


control arguments selected from the follow- 
Ing set: 
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fous Ceo 


“LINK 


“ALL oO 


-EXP 


-BUSY 


ee 2 


go = to ae 


~oTH 


~bTU 


cr 


or 


es 


i 


i 


1H 


-F 


ss 


ti 


List only directories subordinate to the 
defined entry. 


— 
—e 


List only files subordinate to the defined 
girectory. 


List only Links Subordinate to the defined 
girectorye 


u 


List all entries subordinate to the defined 
directory. 


ijst atl files subcrdinate to the specified 
directory whose retention periods have 
expired. 


List all files subordinate to the current 
directory that are currently allocated. 


List the attributes of the selected 
entries. 


List only the name type and size of the 
Selected entries. 


iist entries in order by the date/time last 
modifieg. The most recent will be listed 
first. 


List entries in order by the date/time last 


used. The most recent will be listed first. 
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GR 4 


List the entries in ascending alphabetic 
sequence. 


{ 
pa 
wo“ 
<, 
ae 
i 

{ 


reverse the order in which the entries are 
Listed. This option may be used with -DIM , 


Notes 


1. The following options (-0IR, ~-FILE, LINK, ~ALL, 
~EXP, ana ~-3US5Y) are used to determine which entries 
are to be listed. 


wnile the remaining options specify the degree of 
getail required and the order of presentation. 


8 


zkek ydentify the permissions required *xk 


Se leaded oO LES tcACL 


This function tists the entries In the access control 
List CACL) cf a file or directory. 


Format: 

LIST_LACL <pathname> <access_identifier> ([<ctrl_args>] 
wheres 

<patnhname>ss= 


is the name of a directory or file. If the 


K py word “WD 31S used or the pathname 
omitted, the working directory is used. If 
the pathname 1S omitted, an access 


identifier cannot be specified, The star 
convention can be used. 


<access_identifiero>is= 


S an access Control name that Must be din 


7} 
the forms: 


<person_id>.<account_1d>.<node_id>.<domain> 
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ALL matching ACL entries will be listed. If 
the <access_identifier> is omitteds the en- 
tire ACL will be Listed. 


Notes: 


1. The user must have wmodify or list access rights for 
the Specific directory or file. 


éw I1f the command is invoked with no arguments, the en- 
tire ACi on the working directory is listed. 
Seleleed List Lnitial ACL 
This function is used to list the entries of the file 
or directory initial access control list in a specified 
directory. 


Format: 


LISTLINIT_LACL <pathname><access_tidentifier> 
C<ctrl_iargs>] 


Wheres 
<pathnname>::= 


is the name of a directory. If the name is 
omitted or -WD specified » the working di- 


rectory 158 used. If the pathname 1s 
omitted, an <access_identifier> cannot be 
specified. The star convention can be. 
uUS@d . 


<access_identifier> ss: 


1s an access control name that must be in 
the forme 


<person_id>.~<account_id>.<node_id>.<domain> 
ALL anitial ACL entries with matching names 
are listed. If the <access_identifier> is 
omitted, all entries on the requested ini- 
tial access control list are Listed. 


<ctrilarygs> 


optional control arguments may be Selected 
from the following set: 
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oy 


-o1 


Notess 
1. The 
tor 
~cf List 
Thi 
use 
Formats: 
Ea 


~~ 


The 


C aus 
aCce 


e all entries on the reguested Initial. 
Ss control list to be Listed. This ar- 


gument 1s redundant if <access_identifier> 


1s 
<acc 
spec 


Kk Or =D £25 


Spec 


trot 


user must ha 
ae 


is function w 
er's current w 


st Working_Di 


Tnere are no 


A uSer need n 
function. 


3.1e1.-¢258 walk subtree 


wee wae 


oe A = SN «Eagle Ea ae ES 


WALK _SUBTREE 


line to be execu 
ture subordinate 


omitted, It overrides the 
ess_ldentifier> , if both are 
ified. 


ifies that the directory initial access 
rol list is to be modified. 


ifies that the file initial access con- 
list ts to be altered. 


ve list access for the specified direc- 


TLL List the absolute pathname of the 
orking directory. 


rectory 


ootions for this function. 


ot have any access rignts to use this 


command causes the rest of the command 
ted at each level of the catalog Struc - 
to the specified directory. 
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Format: 


AALK_SUBTREE <pathname> <command_line> <ctrl_args> 


Wheres 


<pathname>ris= 


is the name of the starting directory. If 
-~wds then use the current working directo>- 
rye 


<command line>s: = 


<c 


“fino t Sine. 5 


the command line to be executed. Enclose 
the command an quotes if embedded 
separators are included. 


trl_args> 


optional control arguments taken from the 
following sets 


R 


specifies the first Level of the catalog 
structure to be uSed. Default 18 le 1.@. 
the directory specified by the pathname. 


“LAST <n> $22 


“SRIEF or -BF 


specifies the Last level of the catalog 
Structure to pe uSed. Default is 999CaALL 
Levels). 


HH 


Suppress the printing of the directory 
names Guring the execution of each 
<command_line>, 


execute the <command _line> from the last 
LeveL to the first Level in reverse order 
from the normal first to Last order. 
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Die | ae 


a a a am we ee em 


The following Active Functions are initiated as a re-~ 
Sult of an active string detected in an ECL command 
Line. They are 1mmedgiately evaluated and will return a 


character 
entities 
tnat 
the command tine, 


wm 


Formate: 


Salecece FLLED 


Formate: 


Se1.¢2.5 bIRS 


Formats: 


3e1e¢e4 LINKS 


Wr 


Foritat: 


string representing information about 
In the Directory hierarchy. The information 
returned will replace the Active Function name 


1s 


LLwDdJ 


returns the current working directory pathname, 


LFILES ([<directory>] <starounameo] 


returns a list of Simple file names separated by 
Syaces. The returned file names are those that 
match using the star convention as expressed Dy 
The current working directory is 


<star_nameo. 
useu unless a <directory> iS specified. 


LDIRS Lx<directory>Jj <star_name>] 


same as FILES, except that this function applies 
to directories. 


LLINKS (C<directory>] <star_name>] 
same as FILES, except that this function applies 
to links. 
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Fortat: LHGOME DIR J 


returns the pathname of the user's home directo- 
ry 4 


Format: LENTRY <pathname>] 


returns the entry name portion of the absolute 
pattiname developed from the specified pathname. 


Formats: LSTRIP <gathname> <strod] 
returns the absolute pathname of the specified 
pathname with the the last component removed. If 


str 38 specifieds the last component is removed 
only if it matches the <str> value, 


Format: iLSPE <pathname> <str>] 


same as STRIP except that the it returns the 
entryname portion of the absolute pathname. 


Se lece oD DL 
Formats LUIR <pathname>r J 


returns the directory portion of the absolute 
patnname derived from the specified pathname. 


aie eet YOuID 
Format: LVOLID <patnnane>] 
returns the root volume aid of the absolute 
pathname for the specified pathname, 
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Dele 5 


re eee 


71 


fi 


Qorugm services 


Any program can request FHS services in the course of 
execution of that program. These services include 
those availabdle through ECL commandss Directory Active 
Functionss and services described velow which are only 
available to programs. 


Reguestiog Proycan lecvices 


A CLIMB to the Command Interpreter 1s used for each 
call for service except WALK _SUBTREE. The first param- 
eter descrivbes a command block. The second parameter 
describes the service to be executeds expressed in ECL 
Syntax. The third parameter describes a segment where 
the output from the function will be stored. 


Format 

ICLIMGD ChDI,S 
Farameters 

~ descriptor U : frames the Command Block 
- cescriptor 1 : frames the command Line 


- descriptor 2 frames the output area 


Command tlocx 


ame Gm 6 Gee Cm OU ae amt (i ee RD cen (SEED GI cee wie aim cuits CD ON GE) A CD OY cee 


| FC.#IMS i 
i ee eee mee ee Oe eee ai i: a <e is in ci sn i as ta “em, il a | 
i ~FC.ORS i 
SSS SSS Sle SSS See SSeS i 
PCs LAS | rfu i 
| ------~-~—- ee a es | 
i Cal OS | FC.ROS j 
Input 


FC .CLS Command line size 
PU al OS Initial output size 
FCe.ROS Result output size 


Output 
FC oe IMS Immediate status 
PC wORS Original status 


T=78 June 254 1979 —- 09:35 


Status Codes 


The Status codes returned will 
vary based on the command 
initiated, 


5e1.5.c kead File Attributes 


This function retrieves the file attribute block for a 
named file. The request must specify either the inter- 
nal file name if the file 1s allocated or the external 
file name, The third descriptor of the call defines 
where to store the Obtained attributes. 


Formats 

Reau_File_aAttr L<pathname>Il-LFi<ifn>] 
wneres 

<patnname> rf: 


pathname of tne file whose attributes are 
to pe obtained. 


~ITFN<ifn> 3: 


is the internal name assigned to an 
allocaetea file. 


Notes: 


1. Tne -IFN option may be used only i1f the file is 
allocated. Pathname may be used for any file, 
allocated or not. 


501.525 Retucn Allocation Information 


This function allows a process to obtain information 
about the mass Storage files currently allocated to 
that process. 


The third descriptor of the call defines where to re- 
turn the allocation information. This information 
includes a summary of tne number of mass storage files 
allocated and file protection services being used. 
This will be followed by a List which contains one en- 
try tor each allocated ie ie cae Each entry specifies the 
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Internal File Names Allocation type (Rs Ws Ar Es test 
mode etc.) and file protection options. 


Format: 

return _Alloc_Info C-IFN<i1f n>] 
Wheres 

“~IFNSiftn> 322 


1s tne Internal name assigned to an 
allocated file. 


Notess 


1. It -I1FN is specified, allocation information is 
returned only for that file. 


Cw If -IFN 7185 omitted, allocation information will be 
returned for atl files assigned to the user. 


3o1.4 SyStem services 


fhe FMS System Services consist of 4@ set of functions 
avallable only to system processes such as Peripheral 
Allotator and access methods Such as UFAS and IDS. 


These services are requested via a CLIMB to the FMS do- 
tain with the function code selecting the particular 
function to be called. The first parameter always 
describes a command block. Additional parameters may be 
required depending on the function requested. A de- 
scription of the parameters and command block is 
provided with the description of the individual system 
functions. 


5.7.4.1 ElLe_AllLocation 


wefore any operation can be performed on the contents 
of a file (Such as opener read or write)s, the file must 
be allocated to the user, This functions which results 
from a GET command or from a resource template interro- 
jations provides the means by which the Peripheral 
AllLOcator reguests allocation for cataloged files. 


Format 


ee ee as FMS e5e/FALL.AFe EAXU 
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rarameters 


8LlLOck 


the PAT 


- agescriptor U : frames the Command 

- descriptor 1 : frames the pathname 

~ descriptor 2 : trames space where 

will be built 
Cotifiand tlock 

| FCeIMS | 

pm------ ----- rieainntientnetientestienteniantentnntne | 

| POSORS | 

| “ce, is ein Seis (Sin ia’ be” et tn. i i ss ig “es. <i ai! ig sat ga. Ct cig cee i aes |] 

i FC.IFN { 

| | 

i eh a a 8 ee espa ee Ao Ee ect Ss ae ss igs as Nein ages Patna ! 

| FC.RAM i FC.PNS | 

fm eee te ee ee esas ssa ad Ss (aa —— | 

j FC .vT Y | FC .DEN | 

j aie vate el oA eat RAPD Rie PoP a EN eg ast te ae Se i 

| FC.VSN ly 

i i 

| rn nn wn wn nn nr nr rr ere = 2 

| FC.USTI 1’ 

Input 
FC eI FN Internal name for the file 
FO .RAM Requested access mode 
FO.PNS Pathname size 
GCutput 

FC «e{MS immediate status 


FC .ORS 


Original 


status 


““FEVAPG Access permissions granted 


“EC DEY Device type 


FC «DEN 
FC 2VSN 
FC .USI 


Stat 


Density (for tape files only) 


Volume Set 


User supplied 


us Codes 


name 
informati 


on 


| File is busy 
15 File is abort locked or contains 
defective space 
25 File is on a disk pack that is not 
currently mounted 
55 Read only access requested for a 


null content file 


1-31 


June 25, 


1979 - 


09:35 


Function 


The catalog structure will be searched for a 
match on pathnatie and the file's ACL will be 
checked to determine whether the user may acy 
cess the file in the requested access mode 
CFC.ZRAM), It permission is granteds this func- 
tion will build a PAT. Tnis PAT will be used 
by IGS to map file addresses to device and de- 
vice addressv and to constrain operations on 
the file to those yranted by allocation. 


On a successful allocations this function will 
returns 


o Volume Set Name 
The patnname may reference any cataloged file. 
Lhat includes a yeneration group or an individ- 
ual generation file. 
3e124-2 File _Allocation_lTest 


This function is used by tne Peripheral Allocator to 
determine the availability of a cataloged file without 


reserving the file. I[t determines whether the file 
exists and if the user haS permission to access the 
file. 

Format 


ICLIW8B FMS eceFTALLFAEAXG 
Farameters 


- oescriptor vU 
- descriptor 1 


frames the Command Block 
frames the pathname 


65 35 


1-82. June 254 1979 = 09:35 


Command Glock 


i FC.2IMS | 
Doc hace as eee kes ees a a4 
roSURS i 
 celteedicertieedlienteritestieenienlinatuadeatientnndend a aE ee — am em | 
rfu | 
| | 
j int ois sau lai ‘ass cave ei. id ed ee ee ee ee ee | 
| FC BRA I | FU .PNS | 
|. is i a sak se ae ee ee ee ee ee oe = | 
| FC .DT Y | FC .2DEN | 
f-—--- sacs lee. asia cas Pa Sas tai cosets” allow Sas" ‘Cad ak ———— | 
FC VSN | 
| 
Input 


FCO ..RAM Requestea access mode 
FO .PNS Pathname size 


Output 


FC .I%S Immediate status 

FO.ORS Original status 

ae Smee Oe a | Device type 

FC .DEN Density (for tape files only) 
FO .VSN 8 Volute Set Name 


Status Codes 


4 File is restore locked 

15 File is abort locked and access 
reguest 3S not for query or recov- 
ery 

25 File 1% on a disk pack that 31s not 
currently mounted 

26 File@ is on a tape that may may or 
may not be mounted 

93 Read only access requested for a 
null file 


Function 


[ne catalog structure will be searched for a 
match On pathname and the file's ACL will be 
checked to determine if the user May access the 
file in the requested access mode. If the user 
nas permission to access the file this function 
will returns 


oO YOlLume Set Name 
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o Gevice Type 


Oo Ubensity (Cfor tape file only) 


Se te4Ged. Fae 


—~- ER tan wee we ae 


This function 1s used by the Peripheral Allocator to 
deallocate a cataloged tile upon termination of a run 
type cConmandse execution of 4a REMOVE command and upon 
termination of a process. 
Format 
TCLIMRA FMS,1-FDAL.VFAEAXU 
Faurameters 


~ descriptor 0 : frames the Command S8lock 


Command tlock 


j FC.IMS | 

i Si Ss it at Sag ec aga a a ta ‘as hae i 

i FO .URS i 

j as ~ cea Pec 2 Ges car ene -“y cow Stas a's ce. akes> ce» sues Con (falas ct ats le “es env “enSees Sha i 

i FC .IFN i 

| | | 
Input 


FO .IFN Internal name for the file 
Output 


FC .INS lmmediate status 
FO.LORS Original status 


Status Codes 
24 
Function 
The user's PAT Pointers will be searched for a 
watching IFN. If a match exists» the count of 


outstanding allocations against the file will 
pe decreased and the PAT removed, 
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if the file was written tos the change date and 
time is updated tin tne file description. If a 
new generation file was created and the job 
terminated normallys the current pointer 1s 
updated to reflect the new generation file and 
the absolute generation number is Increased by 


one. 
321.44 File_Grow 
This function 14S used by tne buffer manayer to 


dynamically yrow @ mass storage file when a user 18 
writing a sequential file and has requested a write to 
a control interval that 18 beyond the end of the cur- 
rent file. 
Foriaat 
ICLIMG FMS ele FGROJFeEAXU 
Parameters 


- descriptor 0 : frames the Command Block 


Comnand block 


a: ah em ee a ae ee Ce nee ee ep ED CD WE +O ee ep ee ee ee OP ee ee 


i FC.LTMS f 
| me nr en ee ee ee ee | 
i FC .0KS i 
i sess is es <a eas. ass a aa Ra a te a ah a i 
j FC .IFN j 
| | 
E siete Sedalia chat arte ae aes al Spe ee eee 
i ae Ore ce) me 6 { rfu I 
Input 


FC -LFK Internal file name 
PC 2iNe Number of CI's to be added 


Gutput 


FO .IM@S L[nmediate status 
FC.2ORS Original status 


Status Codes 


55 
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Function 


Tus 


321.429 File _keallocation 


To provide economical recovery in case of system fail- 
ur@s processes In execution at the time of the failure 
can ve restarted without resubmitting the job and 
re~executiny ovrevious processes. On such a process 
reStarts cataloged files must be reallocated, for the 
busy counts on system restart may have been reset, 
removing any indication of allocation from the file de- 
scription for cataloged files. 


This function will allow a PAT for the file to be 
retrieved by the process restart facility for a file. 
It may also be used to allow a file allocation to be 
continued from one process to the next. FMS will ob- 
tain the type of allocation previously granted from tne 
PAT and PAT Pointer and try to grant the same type now, 
Format 
ICLiws FMS elsFRALAF se EAKC 
Parameters 
- descriptor U0 : frames the Command Block 


we 


Command Block 


— PE =P eS one ER ee ee aD ee ee SE ee i em ee ee oe poate tHe 


{ FCeiIMs i 

pa —- ee ee a a a ee om | 

| Po eURS | 

| ----------- w+ - ee --- -| 

FC.IFN | 

| i 
Input 


FC .I1FN Internal name for the file 
Gutput 


PG PMS Inmediate status 
FC .ORS Original status 
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Status Codes 
24 
Function 


function 


3.12%.0 Update P_A_T 


This function is used by I0S when a seek is issued to a part 
of a cataloged file 1s attempted to which the descriptors in 
the PAT do not apply. FMS will obtain the descriptors from 
the File bescriptor for the file for that part of the file 
SOouUght and place them in the PAT, 

Format 

TCL Tis FMS se Cw UPATOF 2EAXU 
Paraneters 


- descriptor U : frames the Command Block 


Command Block 


i Poe LMS | 
j ce ene “aes en OE ee came Sia cma ab ims ence sibel a’ a ins “cg ] 
i FCS ORS | 
| ------------------~------ -1 
i FC, TFN | 
| ------------ ------------ =| 
PC~e FOS | 
Input 


FC.IFN Internal name for the file 
PLG Os Position 


Control interval number to be 
addressed by the first entry in the 
PAT. 


Output 


Pw PINS Immediate status 
FCO.ZURS Original status 


Status Codes 


24 
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Function 


The user's PAT pointers will be searched for a 
matching internal file name CFC.CIFN)D. If a match 
exists and it describes amass storage file, this 
function will retrieve the File Description and de- 
termine which Space Descriptors are necesSary to map 
the part of the file sought. This calculation is 
buse on the position CFC.POS) specified in the com- 
mand olock. 


The selected Space Descriptors will be stored in the 
user's PAT and word 3s bits 14-35 will contain the 
nuiber of the first Llink described for random files 
or Llinks between the first Llink described and the 
sought position. In additions word 2s bit 10 Cfirst 
descriptor not In memory) will be set. 


5o1-24.7 Write _File_Attributes 


THis function 1s used to write a block of attributes 
tor the named file, 


Fora 
TCLIiKit FiS*2eFwWFA. Fe EAXO 
Parameters 


frames the Commanc Block 
frames the attribute block 


~ descriptor 0 
- descriptor 1 


aa 6 


ey 


Command Block 


| ro. MS | 
J ---- -- - --- oleeeeeaiaeetentantnestnesetinentaedtionteetestnan j 
| Poe Rs | 
SS =<= SS oe ae ae ap ae eo { 
FC.IFN I 
i 
| we ene ne rn er en | 
FC.ABS | rfu | 
Input 


FC «IFN Internal name for the file 
FO.AKS Attribute block size 
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Mark Space Defectiy 


Gutput 


FC .IMS Immediate status 
FC 2.ORS Original status 


Status Coues 
C4 
Function 


The user's PAT pointers will be searched for a 
matching internal file name (CFC.IFN). If a 
match exiastss the File Description for the file 
will be retrieved and the file's attributes 
moved from the attribute block to the File De- 
scription and it will be written to the cata- 
loy structure, 


fe) 


This function 1s used to withdraw the defective mass 
Storage Space from suodsequent assiynment and to mark 
the mapping iIntormation in the PAT and cataloged File 
vescription to show that the file Space 18 defective. 
Tne function is called oy tne Exception Processing 
Subsystem when after failing to recover from a check 
character data alertsr tne operator responds with a 
withdraw (WwW) option. 


Format 
iCLIWs FMSsle/FMSD.FsEAXO 
Parameters 


- descriptor O : frames the Command Block 


17389 June 256 1979 = 09235 


Command lock 


om ae ew Te a dm oD te ee a RD OR i ee Oe  . oee . e see 


| FC.LIMS | 
| Sl cap mi ti: aii a i lis ue. ae Sec as ae am mm om | 
| FC.ORS | 
| -- mem nn  e e- EER ee ae ee | 
| FC .IFN | 
| | 
| ------------------------- 
| FC .bDCI | 
Input 


FC »«LFN Internal name for the file 
PC 20 C4 Defective Control Interval 


Cutput 


FE «stT MS Immediate status 
FC .ORS Original status 


Status Codes 
24 
Function 


Vescription to be supplied 


521.4.9 Mark Space Usable 

This function 1s used by a process to remove the defec- 
tive Space Indication from the specified space 
descriptors. In order to use this function the process 


must nave recovery permission for the file. 


Format 


TccI Mb FMSe¢crFRMSULFe EAXD 
Ferameters 
frames the Command Block 


frames a List of control 
intervals 


-~ descriptor 
- dgescriptor 1 


ee O58 
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command Glock 


= ae wm a ae a em ED ae ae Do - oD 


| FC.IMS | 
| Mt aes aa a ee ee ae ee ef 
| FC.ORS | 
1. BN a Nk ge a as tN a ae ice a -| 
| j 
Input 
FC IFN Internal name of the tile 
Gutput 
FC IMS Immediate status 


FC.OKS 


Syace 


Original status 


Descriptor List 


Status Codes 


Function 


vescription 


el eter 


This function 


tive data Indication 

descriptors. In order to 

must have recovery permission for 
Foridat 


[CLIiftie 


Parameters 


is used by 


oe ae 


24 


to be supplied. 


a process to remove the defec- 
from the specified space 
use this function the process 

the file, 


FMS ede FMNDULF,EAXO 


June 299 1979 = 092355 


De lo Ga 4 


- descriptor 0 : frames the Command Block 
- descriptor 1 : frames a list of control 
Intervals 


Command oulock 


i FC.INMS | 
| ree eee nN a ee eee | 
| FC.GKS | 
j ima an iit St less ee ne a eae ae ee a ee ee | 
| FC.IEFWN | 
| 
Input 
PO wilh Internal name of the file 
Cutput 
FOC .IMS Immeciate Status 


FC LORS Original status 


Space BDescriptor List 


Status Codes 


N 
t- 


Function 


DeScription to be supplied. 


Idgentify_lefective_Space 


The identify defective Space function is used by a 
process to obtain a list of spaces on a file that are 


marked defective in the cataloged file description. It 


also provides information to assist in the recovery of 
data in the defective space, This information includes 
date and time of last change to the file contents vol- 
ume serial number of the volume with the most recent 
file Saves, Location of any file protection data such as 
journalea afters or a duplicate file copy. 


dai a June 254 1979 = 09:35 


“e 


de 


Format 
ICLIMS FMSe2eFIDS.FeEAKU 
Parameters 
~ cescriptor UO : frames the Command Block 
-~ descriptor 1 3: frames space for a tist of 


defective control intervals 


ComMand Glock 


FC.IMS | 

Pree ae late i ld aie a pad claret eae tf 

FC.ORS i 

ea ie ats Sn eee eon eee | 

| FC.IFN | 

| 
Input 


FC IFN internal name for the file 
GUutput 


FC .IMS Immediate status 
FC.ORS Original status 


Lbefective Control Interval List 
Status Codes 
24 
Function 


DeScriptton TsS$ 


1.4.1¢ Replace Defective Space 


This function is used by a Process to replace mass 
storage device space(s) that was previously marked de- 
fective. It replaces tne defective space with newly 
assigned space and tnen modifies the mapping informa- 
tion in the PAT and in the catalogea file description 
to reflect the replacement Space. In order to call 


this function the process must have recovery permission 
on the file. 
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Format 
ICLING 
rFarameters 


~ descriptor U -¢: 
-~ gescriptor 1 3: 


Command rblock 
Ve PEST HS 
| Fe yORS 
a FC.TEN 
| 
tee 
FC «LF NN 
Cutput 
FC »ITMS 
FC.ORS 


Defective Control 


Internal 


Immediate 
Original status 


FMS e¢deFRDSLFeEAXDO 


frames the Command Block 
frames a list of defective 
contron intervals 


am i a ae a a ee ce ee 


name for the file 


Status 


Interval List 


Status Codes 


24 

Function 
This 

tion for the 


Scriptor wilt 
in the File 


function will 

Space descriptors to 
defective 
be replaced by 

Description and also 


use the list 
search 
descriptor. The 


in the PAT 


the file is allocated, 

After the descriptor has been replaced, 
content will be marked cefective if the Mark 
Data befective option is used. 


June 254 1979 ~- 


of defective 
the file deScrip- 


a new descriptor 


09235 


3.1.4.15 Sequential File Position 


This function will return the current file position ina se- 
quentia lt file. It shoulda only be used when the first de- 
scriptor for the file is not in the PAT. | 
Format 
iICLIMs FiaSse er FSFPCF ce EAXU 
Parameters 
- descriptor JU : frames the Command Slock 


Command 8locK 


a a Eb aa  .aen b -D a eee ei ORD em aie -Geep (Cin (ee fee “et ae etn “a ‘tne 


i FO. IMS | 
pm am eo e c een mee SSS SS SS SS i 
Fle QRS l 
j iin i 7a eas eben i sii ei sii kc t ela tis ech as es ig cll aa sa j 
] FC. I1FN | 
i | 
a a See ee Se ae RS cami a { 
{ FO. POS i 
SSS Se SS SSS Sie ae i 
| PCa CRP i 
Input 


FC.eILFN Internal name for the file 
FC.POS Position value (must be non zero) 


Qutput 
Fo.IMS Immediate status 
FCe.URS Original status 
FC.CRP Current relative position in file 
Status Codes 
c4 
Function 


deScription to be supplied 
5.1.9 Status Codes_and_via gnostic Messages 


Status codes are set 1m the COmmand Block by each module 
getecting the condition. 
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The followin, table lists the status codes and 


corresponding ciagnostic messaye. 


Table 1, 


otatu 
Code 
CUctau 


U1 
03 
U4 
U5 
Tu 
11 
14 
15 
and 
ans) 
31 
“& 4 
55 
4 
(5 


S 


L) 


Status Codes and Diagnostic messages 


Diagnostic Messages 


Account not registered 
Incorrect access permission 
File vusys try again 
Incorrect pathname 
No space for file on Volume Set YYY...YYY 
Nonuniqgue name 
incorrect or missing password 
File is abort locked 
File has defective space 
File has defective data 
Access yranted to an I-d-S 1 file 
illegal option specified 
Reau access denied (null file) 
Incorrect Control Interval specified 
File is restore locked 
e Spb 


their 
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